)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:36 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:36 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/saa7115', 0x0, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18)

11:10:36 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
getuid()

11:10:36 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:36 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:36 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:36 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:36 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/saa7115', 0x0, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
getuid()

11:10:37 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
getuid()

11:10:37 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/saa7115', 0x0, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
getuid()

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/saa7115', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

11:10:37 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:37 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:37 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:37 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:37 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0x0, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0x0, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x0, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x0, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x124, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x124, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x4000000)

11:10:38 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x0)

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x4000000)

11:10:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x0)

11:10:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0x0, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private, 0x0, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local, 0x0, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x0, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x124, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x4000000)

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in=@private}, @in6=@local}}, 0x40}}, 0x0)

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:39 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:39 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
getuid()

11:10:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
getuid()

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
getuid()

11:10:39 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:39 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
getuid()

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
getuid()

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:40 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:40 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:40 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:40 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:41 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:41 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:41 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:41 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:41 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:41 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:41 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:41 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:41 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r0})

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:41 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:41 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:42 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$nl_xfrm(0x10, 0x3, 0x6)

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:42 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:42 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:42 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 2:
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:43 executing program 2:
socket$bt_rfcomm(0x1f, 0x0, 0x3)

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:43 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:43 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:43 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 4:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 0:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:43 executing program 5:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:43 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:43 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (fail_nth: 1)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000580)={0x40000008})

11:10:44 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (fail_nth: 1)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:44 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7fffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000))

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7fffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000))

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newae={0x174, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, 0x4d2, 0xa, 0x6c}, @in6=@local, 0x6, 0x34ff}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private2, 0x4e22, 0x3, 0x4e22, 0x6, 0x2, 0x0, 0xa0, 0x3b, 0x0, r6}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x5, 0x0, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0x2, 0x2}, {0x7, 0x800, 0x40}, {0x4, 0x4, 0x7}, 0x70bd26, 0x0, 0x2, 0x2, 0x1f, 0x5}}, @algo_aead={0x4f, 0x12, {{'authencesn(xcbc-aes-neon,cbc(cast5))\x00'}, 0x18, 0xc0, "d006bd"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
socket$nl_xfrm(0x10, 0x3, 0x6)
getuid()

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
socket$nl_xfrm(0x10, 0x3, 0x6)
getuid()

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7fffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (rerun: 64)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
socket$nl_xfrm(0x10, 0x3, 0x6)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})
socket$nl_xfrm(0x10, 0x3, 0x6)

11:10:44 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80040)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0xc51})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:44 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async, rerun: 32)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), 0x4) (rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80040)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0xc51}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), 0x4) (async)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x80040)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0xc51})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0xffffffff, 0xaf2})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff80000000, 0x107000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r2, 0x72123000)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff80000000, 0x107000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r2, 0x72123000)
syz_open_dev$dri(&(0x7f0000000000), 0xffffffff80000000, 0x107000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r2, 0x72123000) (async)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async, rerun: 64)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801) (async, rerun: 64)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 1:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4)

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff80000000, 0x107000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r2, 0x72123000)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
socket$bt_rfcomm(0x1f, 0x3, 0x3)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc) (async)

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x23, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x9ae})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spidev', 0x141040, 0x44)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x23, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x9ae}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2) (async)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x7fff, 0x6, 0x4, 0xc1, 0xff, 0x40, 0x4}, 0xc)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x23, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x9ae})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:44 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:44 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffe, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xfffffffffffffffe)

11:10:44 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async)

11:10:44 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:44 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffe, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xfffffffffffffffe)
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffe, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xfffffffffffffffe) (async)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000c93000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x400, 0x200701)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xf4, 0xab, 0x3ab8, 0x0, <r3=>0x0})
syz_open_dev$rtc(&(0x7f0000000080), 0x77de, 0x400100)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x400, 0x200701)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xf4, 0xab, 0x3ab8, 0x0, <r3=>0x0})
syz_open_dev$rtc(&(0x7f0000000080), 0x77de, 0x400100) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffe, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xfffffffffffffffe)
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffe, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xfffffffffffffffe) (async)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
mlock2(&(0x7f0000dbe000/0x3000)=nil, 0x3000, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x5, 0x2)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x400)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6)

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x400, 0x200701)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xf4, 0xab, 0x3ab8, 0x0, <r3=>0x0})
syz_open_dev$rtc(&(0x7f0000000080), 0x77de, 0x400100)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x9, 0x100})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x400)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6)

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400000000, 0x6c5c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x1, 0x4, 0xb})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400000000, 0x6c5c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400)

11:10:45 executing program 2:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 3:
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x5, 0x2) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x400) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6)

11:10:45 executing program 2:
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x3}, 0xa)

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x400000000, 0x6c5c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400)

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/null_blk', 0x400000, 0x1)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x4, 0xa0})

11:10:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 2:
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)

11:10:45 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:45 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/null_blk', 0x400000, 0x1)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x4, 0xa0})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/null_blk', 0x400000, 0x1) (async)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x4, 0xa0}) (async)

11:10:45 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

11:10:45 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20}) (async)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async)
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/null_blk', 0x400000, 0x1)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x4, 0xa0})

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:45 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x10000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x10000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10) (async)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7}) (async)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) (async)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x10000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:45 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x6, 0x5, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xc20, 0xe16d, 0x1000})

11:10:45 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0) (async)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10) (async)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7}) (async)
userfaultfd(0x80801) (async)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) (async)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)

11:10:45 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x6, 0x5, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xc20, 0xe16d, 0x1000})

11:10:45 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfffffffa, 0x0, 0x7})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:45 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x101000)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffff2b, 0x224080)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5})

11:10:45 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x401, @none, 0x2, 0x1}, 0xe)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000040), 0xeea9, 0x2000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180))

11:10:46 executing program 2:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x4dc, 0x400, 0x20})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x6, 0x5, 0x2}) (async, rerun: 64)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xc20, 0xe16d, 0x1000})

11:10:46 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
userfaultfd(0x80801)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x101000)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffff2b, 0x224080)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0)

11:10:46 executing program 2:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x21a000)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080))

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x7014d1328d4a0927, 0x70bd26, 0x10001, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd2382f184a6aef76}, 0x10)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x101000)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffff2b, 0x224080) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3}) (async, rerun: 64)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r3}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5})

11:10:46 executing program 2:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 2:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x21a000)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x21a000) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x100) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) (async)

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8f, 0x8000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8f, 0x8000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000040), 0x8f, 0x8000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x21a000)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x21a000) (async)
syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x100) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) (async)

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x8f, 0x8000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r2, <r3=>0x0})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/macvtap', 0x400000, 0x100)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 0:
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000002b80)=""/153, &(0x7f0000002c40)=0x99)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffd, 0x880)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_az6007', 0x20000, 0x128)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xd4, 0xf383, 0xffffffe1, 0x0, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002c80)={0x1, 0x1000, 0x4, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000002cc0)={r4})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002e00)={&(0x7f0000002d00), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="62dacaf0c74f3a32337f2a597524abc8ea99d6cb0a788ae5e6086915e1046dced7667dd846094a9406872db074b4e3399ed247485426915e37e5c991097e9402f89dbc4755aa72e2bf431c66264a772b39862038af15e2a03268b1bf674ed6ceb4209e47dc4ead753d730af968111bd1c2c6358fe52e837d0355c0702e4b8d7fe68e325bfd5f378543142fc35cda79a96a5a8107f7", 0x95}, {&(0x7f0000000140)="5b34d64f9a8e6572ebac0a313fb48a7ff6ae9d6e8ca9874f20550527eb1681b0fa8e37db6fdd0c4a39bd5cba11bb786c1273273daa44be36ffcd56fb7c4c90fcfd5d27efcf378bf33a51bb3226132a33814c90f09fc7cfdf78afd91675a35e83de8efb9899a3d1e3ca15d814b89066e4fdd2a1ad8a5e85ea0febcbfec1ef18e19d485ff6b48608e8905e1ae1f573233c6e0421edcff3acd8caa61fbcd2a089a5e04a680400d164", 0xa7}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000001300)=[@iv={0xe0, 0x117, 0x2, 0xcb, "e66e31a5231b88dbd7e7a9e706d3a477bb288f3c93d67ea2a42796c9f817535cf0d9b8e1ca9c46b942493eaba8e8b1890b547b12ed09c71ca5b4a5058a739e1df0a4717cb8c0d2e340d4ad4019fa776295a3979b53896388700ebcfc368d86b8b497e068b1af19d06aed350d595e1d5dee711cdb6515f82510ea758e168662b9e50d2d7f12308298dd5724c8b73e8c50d01bd63a2bc7a0a754b2d9e239133b3d7440721d23005502a83249f974b6cede47b3403e1a29e9e8d3a5f4ad533e957c987245f46db283f3c7ac08"}, @assoc={0x18}], 0xf8, 0x4000000}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)="a1a4012657401cbdc9ec9a979b24d4fe573f6a9ebec1baf03c888c74a1d2d8613f094e14ac40b4c152bbec180c0d9189e3c9c62699edcef8de2e73f82533229b8e9e836291b01b6f19ffb67b5ed7", 0x4e}, {&(0x7f0000001480)="7c6c12be411a46345b0893952b180fc6f36ca80d38448b51e9e8f78d5c59f841786860596647db162c2f7a7dca767649db42e6ba038470c9616ec699661389aa209f32db293c517e9e1217c78a5462f195e6e88143768a06fadeceff734fd7a257335730a48c8c125c05f7b9f51499ee6d139a5051ffc4a12ea971d41005609850c38b6088712fe0fe7073c4f29920e6e83c11c1446b011b4eae440727bed63d5351bb1b9964e1614dca756dc424088200cb6071dd2372f907750ab92a19e447dc6e9e", 0xc3}, {&(0x7f0000000240)="af62983521ec361fd9a9ca452db64640af59b9a07cafab059c4cca96aeb172fe", 0x20}, {&(0x7f0000001580)="32412eb1ff9e8935aaa74bf6ebb9f802b38bd1925c4c98776ab33864553284d6645c0dc0fa005b59f8f26b0c33a210d6a151b84986cdc180c08e2d5247bad57fdd2b5c8e7cbfdd76053446c797ecfe32b50a5164", 0x54}, {&(0x7f0000001600)="1d80b9a2e292c0039fe0116bc0fcdd81c274fc23b4e11d1c1be5cb5911c8000bd94670f4d6bf89780fc2fb74b319546116f55147d5150845d22fe8378da355b2e8e47530f3e99a182b9231e1e3cc029625d77c40f869dae1901740deb227a77944059aff326146673046d455f19c4dedc3b60ba029c7e3f492cf6253c5", 0x7d}, {&(0x7f0000001680)="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", 0x1000}], 0x6, &(0x7f0000002700)=[@iv={0x38, 0x117, 0x2, 0x24, "75970ed00d04db1f159509402efe9f798018d0e3ebbfe313bf2eb869d7e97bf5ccb2b1d6"}], 0x38, 0x20008000}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002740)="86f525bdd67efa87f10391ad3a5b17d784ce9d26ed8837dc6d6f00cc7b48ac6cd9ba75891daffe9ed3efa5c49a949d9d442517e370538dcd71a2cff24d9fb54270290e5825f49a93090dfe", 0x4b}, {&(0x7f00000027c0)="890c2cc5f9eb6095b353660f4195bbf48b6b8b099d86f448fb41", 0x1a}, {&(0x7f0000002800)="c19e6a6bb800f0aa5bbcd15dd3061190e7ca9c13e87c9c6b3ef5ed75dcfcf930c505c38aa09ebd5a24f39a7634e05b2b6e29abd1340d42e2db302df83fecefb6a8c90d552d940e6e4772c2f2129c86995d01439a986393604a7f873e572400345e09dafb640c741a9fde97fd967526fd52582ab3e2d76fa235d7aa3b0bb4ccb094b854824ff7c986e51843bc70ea2861041839651426653b3b855a7614e9ddd65179e3538cf55f2103644cfe392b", 0xae}, {&(0x7f00000028c0)="95df47cdc4b03ab12ec622b7629ae72f6890", 0x12}], 0x4, &(0x7f0000002940)=[@iv={0xf0, 0x117, 0x2, 0xdb, "2a056de7b71cacef0ab48f1b313f22da0b5daac1d840e6dc515ba91c63393eaa79d64914649c730b230be0326d992a82c19268e6a659dc04fd2c22394f1aa906d9d0d32701393629af38d4b0258b374f4f6410d2aa2af18bc9b9433d7ff3cd2fdda7594fd22c124108cc1218f271b51f2db884c3451cd878944e3057544b3cd38f645f013344deea9e392ed0cff066cb4fc1667cb7e2b36cb969617eb5d9abc4f25e2864ea2fce4cc22a4802ee575d71521a47a0d8a1fac656c52910b4fa2cb88bfa9d111a1fd8211f72f0f85d4af5569e9ab28471c084f59b61d8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x462c92bb}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0xc22d59464b073483}], 0x168, 0x8004}], 0x3, 0x48)

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r2, <r3=>0x0})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/macvtap', 0x400000, 0x100)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r2}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/macvtap', 0x400000, 0x100) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 0:
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000002b80)=""/153, &(0x7f0000002c40)=0x99) (async)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffd, 0x880) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_az6007', 0x20000, 0x128)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xd4, 0xf383, 0xffffffe1, 0x0, <r2=>0x0}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002c80)={0x1, 0x1000, 0x4, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000002cc0)={r4}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002e00)={&(0x7f0000002d00), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) (async)
accept4$alg(r1, 0x0, 0x0, 0x80800) (async)
sendmmsg$alg(r1, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="62dacaf0c74f3a32337f2a597524abc8ea99d6cb0a788ae5e6086915e1046dced7667dd846094a9406872db074b4e3399ed247485426915e37e5c991097e9402f89dbc4755aa72e2bf431c66264a772b39862038af15e2a03268b1bf674ed6ceb4209e47dc4ead753d730af968111bd1c2c6358fe52e837d0355c0702e4b8d7fe68e325bfd5f378543142fc35cda79a96a5a8107f7", 0x95}, {&(0x7f0000000140)="5b34d64f9a8e6572ebac0a313fb48a7ff6ae9d6e8ca9874f20550527eb1681b0fa8e37db6fdd0c4a39bd5cba11bb786c1273273daa44be36ffcd56fb7c4c90fcfd5d27efcf378bf33a51bb3226132a33814c90f09fc7cfdf78afd91675a35e83de8efb9899a3d1e3ca15d814b89066e4fdd2a1ad8a5e85ea0febcbfec1ef18e19d485ff6b48608e8905e1ae1f573233c6e0421edcff3acd8caa61fbcd2a089a5e04a680400d164", 0xa7}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000001300)=[@iv={0xe0, 0x117, 0x2, 0xcb, "e66e31a5231b88dbd7e7a9e706d3a477bb288f3c93d67ea2a42796c9f817535cf0d9b8e1ca9c46b942493eaba8e8b1890b547b12ed09c71ca5b4a5058a739e1df0a4717cb8c0d2e340d4ad4019fa776295a3979b53896388700ebcfc368d86b8b497e068b1af19d06aed350d595e1d5dee711cdb6515f82510ea758e168662b9e50d2d7f12308298dd5724c8b73e8c50d01bd63a2bc7a0a754b2d9e239133b3d7440721d23005502a83249f974b6cede47b3403e1a29e9e8d3a5f4ad533e957c987245f46db283f3c7ac08"}, @assoc={0x18}], 0xf8, 0x4000000}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)="a1a4012657401cbdc9ec9a979b24d4fe573f6a9ebec1baf03c888c74a1d2d8613f094e14ac40b4c152bbec180c0d9189e3c9c62699edcef8de2e73f82533229b8e9e836291b01b6f19ffb67b5ed7", 0x4e}, {&(0x7f0000001480)="7c6c12be411a46345b0893952b180fc6f36ca80d38448b51e9e8f78d5c59f841786860596647db162c2f7a7dca767649db42e6ba038470c9616ec699661389aa209f32db293c517e9e1217c78a5462f195e6e88143768a06fadeceff734fd7a257335730a48c8c125c05f7b9f51499ee6d139a5051ffc4a12ea971d41005609850c38b6088712fe0fe7073c4f29920e6e83c11c1446b011b4eae440727bed63d5351bb1b9964e1614dca756dc424088200cb6071dd2372f907750ab92a19e447dc6e9e", 0xc3}, {&(0x7f0000000240)="af62983521ec361fd9a9ca452db64640af59b9a07cafab059c4cca96aeb172fe", 0x20}, {&(0x7f0000001580)="32412eb1ff9e8935aaa74bf6ebb9f802b38bd1925c4c98776ab33864553284d6645c0dc0fa005b59f8f26b0c33a210d6a151b84986cdc180c08e2d5247bad57fdd2b5c8e7cbfdd76053446c797ecfe32b50a5164", 0x54}, {&(0x7f0000001600)="1d80b9a2e292c0039fe0116bc0fcdd81c274fc23b4e11d1c1be5cb5911c8000bd94670f4d6bf89780fc2fb74b319546116f55147d5150845d22fe8378da355b2e8e47530f3e99a182b9231e1e3cc029625d77c40f869dae1901740deb227a77944059aff326146673046d455f19c4dedc3b60ba029c7e3f492cf6253c5", 0x7d}, {&(0x7f0000001680)="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", 0x1000}], 0x6, &(0x7f0000002700)=[@iv={0x38, 0x117, 0x2, 0x24, "75970ed00d04db1f159509402efe9f798018d0e3ebbfe313bf2eb869d7e97bf5ccb2b1d6"}], 0x38, 0x20008000}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002740)="86f525bdd67efa87f10391ad3a5b17d784ce9d26ed8837dc6d6f00cc7b48ac6cd9ba75891daffe9ed3efa5c49a949d9d442517e370538dcd71a2cff24d9fb54270290e5825f49a93090dfe", 0x4b}, {&(0x7f00000027c0)="890c2cc5f9eb6095b353660f4195bbf48b6b8b099d86f448fb41", 0x1a}, {&(0x7f0000002800)="c19e6a6bb800f0aa5bbcd15dd3061190e7ca9c13e87c9c6b3ef5ed75dcfcf930c505c38aa09ebd5a24f39a7634e05b2b6e29abd1340d42e2db302df83fecefb6a8c90d552d940e6e4772c2f2129c86995d01439a986393604a7f873e572400345e09dafb640c741a9fde97fd967526fd52582ab3e2d76fa235d7aa3b0bb4ccb094b854824ff7c986e51843bc70ea2861041839651426653b3b855a7614e9ddd65179e3538cf55f2103644cfe392b", 0xae}, {&(0x7f00000028c0)="95df47cdc4b03ab12ec622b7629ae72f6890", 0x12}], 0x4, &(0x7f0000002940)=[@iv={0xf0, 0x117, 0x2, 0xdb, "2a056de7b71cacef0ab48f1b313f22da0b5daac1d840e6dc515ba91c63393eaa79d64914649c730b230be0326d992a82c19268e6a659dc04fd2c22394f1aa906d9d0d32701393629af38d4b0258b374f4f6410d2aa2af18bc9b9433d7ff3cd2fdda7594fd22c124108cc1218f271b51f2db884c3451cd878944e3057544b3cd38f645f013344deea9e392ed0cff066cb4fc1667cb7e2b36cb969617eb5d9abc4f25e2864ea2fce4cc22a4802ee575d71521a47a0d8a1fac656c52910b4fa2cb88bfa9d111a1fd8211f72f0f85d4af5569e9ab28471c084f59b61d8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x462c92bb}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0xc22d59464b073483}], 0x168, 0x8004}], 0x3, 0x48)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, 0x0, 0x818090, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r2, <r3=>0x0})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/macvtap', 0x400000, 0x100)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})

11:10:46 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x9, 0x6, 0x7ff, 0x59, 0x9, 0x3, 0x9, 0x4}, &(0x7f0000000040)={0x21bf, 0x4, 0x8, 0x40, 0x6a19, 0x9, 0x80, 0x4f}, &(0x7f0000000080)={0x63d8a974, 0x0, 0xec, 0x1, 0x3, 0xfffffffffffffffa, 0x1f, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)

11:10:46 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 0:
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000002b80)=""/153, &(0x7f0000002c40)=0x99) (async, rerun: 32)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffd, 0x880) (async, rerun: 32)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_az6007', 0x20000, 0x128)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xd4, 0xf383, 0xffffffe1, 0x0, <r2=>0x0}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002c80)={0x1, 0x1000, 0x4, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000002cc0)={r4}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000002e00)={&(0x7f0000002d00), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x80800) (async)
sendmmsg$alg(r1, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="62dacaf0c74f3a32337f2a597524abc8ea99d6cb0a788ae5e6086915e1046dced7667dd846094a9406872db074b4e3399ed247485426915e37e5c991097e9402f89dbc4755aa72e2bf431c66264a772b39862038af15e2a03268b1bf674ed6ceb4209e47dc4ead753d730af968111bd1c2c6358fe52e837d0355c0702e4b8d7fe68e325bfd5f378543142fc35cda79a96a5a8107f7", 0x95}, {&(0x7f0000000140)="5b34d64f9a8e6572ebac0a313fb48a7ff6ae9d6e8ca9874f20550527eb1681b0fa8e37db6fdd0c4a39bd5cba11bb786c1273273daa44be36ffcd56fb7c4c90fcfd5d27efcf378bf33a51bb3226132a33814c90f09fc7cfdf78afd91675a35e83de8efb9899a3d1e3ca15d814b89066e4fdd2a1ad8a5e85ea0febcbfec1ef18e19d485ff6b48608e8905e1ae1f573233c6e0421edcff3acd8caa61fbcd2a089a5e04a680400d164", 0xa7}, {&(0x7f0000000300)="e5cc2184ad730d47b7cd6355148d1c0e17a716a649a9997ddb5a35cb7d2c2968f044a92e713027a042e73550ad1e514018e94004b1babe17f884e86de6b3073142ec9933edaa12ea73a9029502d67eb11f7e044447e9851027241361684e9ddd3af6ccba8b021492bd90acb05f1547c219e137d27e7b1ded91c8f036edc9cb13b620eaef5d192a5d22ae20df50c730b8a38d780463e3b524edcbfc1359f9a2e39e47bf6daaf6cb340c5f5729a73ed37981bbc58c9d3f91ad72e880f7633751eb7f634f9186389aa1121a974c810e0b3b2b5abe5463e400efebdbd012d70c54340762177c526ffe96a7599356d2c8dc4c99d9030ae457d7cdd7a2da1ecd4b70f92d5524062aa83060d4559fd0f00976ef4f9797feca092a0ffd489feeea7667e7fedef750d87d28c3d6507ee09468c50033fabc3313573990b624eba21f8484cf185ef28a98b841ebc76c38cca784854f7a96122a912490db7b7c279697fb743bf975297626062da2764e6e8b8ca1d4bd15ea0caf5bbe6ac65224df837e1335e609f630e548bcee28e6f9da0b07af8f01a39c4e6d6d616febce51f9ad5f37566213a1ecb08aa6f7e4e849a575bdc35323eb965da915052ba283a6edbd9c93ebddaac170500c93ed2e1bfe910747838c57126a7ad14180c7d17d81f7a396bacb68f53c1536c17658272c961f8e48d7daab2f84aea77950cc268577901e4a0d1a987fbfed2d3e66a468bd776aa9fd46fb4a0fa2f9838a08362bf96ef871b4bb1f4f040827fde2c8dcccbc87a724d9fa6233e6c0ce0f3275c688ba8bd686c824c6dfe1296ee070815c5b7e8517987aea2ba48bebff7c307903aaf0c73d9cd1bee16a1b9b1bc09d9f6c47a9ded23c23b4098be30f1b7220bf8408fcab1aebb8b60ac402be187de0835fadad87758ca1cf544dcf49fae29f06d3e7accf66c0bf0fe1d1ee3ccf3c187f4be394d0e7fc84dde876e117e5349910b61f08fcaa0ec35ba08e1ab751e9ab2997e83330564dd3e35504bee194efcb2a817ef70b357fd012974377fd5ad7eb6cdeea809e61476bc6736ff56e41791a769b46f229aa7888eabb79f2eff1589d4584d985dda1385d1d879b53444c8a6dcf1316503d6fcde04f317aae5f347fbc24aa484590ba797fbff74aa9c35d8be2e3b7c8a78d9a7e312d2e6a95fd3c207e300b6de14ee2a94fa5715fb9e4335238484e34fd58a4e4e4ebe358f9b0f2292460d9d80090982ea648ae3001b399e5c9c8ae6a9048cdbdb28b9c0869da5ff3ef49835b587a8bae537db63ebfbef22cd5191315d199299511259e6dacc1d4929be0f29a53e49b0e45445e5b6800676061a95bc760bb677ef7f818e1eb0a8e0c3bc6b22d6d778837b09819b5792667ada716efea0d12b3d56008c95efaefc6dcabba526778d2173d2e60143bdfc66ac7385a57ad3b7a4cc07ec2298710e21ecc1f125b8390989e683cdc0ea60f4f98075ec8e7087f739a3dcb48fa315dc495581e5bfe2f15e245b6516da744e52830750083f628ca3d3451344b27ec87bffa1e013b0ae35ec71ce3560bd85eee44a4b6704b5791e5726c2cb7693df01ea61272b8dcb00cab6802a12adf36f3fbf2347c325b8cd246f8014deac597b23929b07cada6946bf2386ca7b715be82c837e99169b5d13ee62f0154d3195d98672d9e63ae3275929be832a47f3dca2a58ab3e050b9f8be26191816dcc26af7af783c10500cef104a632f78b320083fbf0067cafccbfceafd8886240edba5d1b7491a3473007c49d71839f54a4b55699a8f5d166e27ea1fe37de93d64d10320278ae038347833eeb7e2276d09d67380a9ef516b7dcd631647f3ba662c3dc6a285e61394430f6b11a38d6c06d21204cb913f1b36183a0daf63a4b6116c9e9b01f413f001be2df6d77c62b849f17a8ba1d5ac93814949c81fd0c0840a4ce1184cb4de09d42fbf424dd6e86aaca4a3e0591356a318042ccf2014a1a35e3f15c5ae4522f72f0a1dda4d2630172800ce10f417596b4935f646e3cf88cb79dd4e5805480055868c27423b38cc9d850fa4478167c9b80d6abfc6773eb3fcd16906395c4da4ad56266e5778b72fac027b57a57b12d91698bcdaf38814c73f0aa16ce09edd650fa6cf84f1a27296436b6bda4f81cd967be7960431c95379b18b17a4222035b7d876d47d518f5e3d2edd81bac6c9a03df0f652ca34a9ea7e5a16dc9b64823142d01517e8f039fdb077257fbdc92e34ec50ee15b20e0be2decab2176ea7f47a8dacd5f1bd50852c852889076dd248fe5ab0738763a8da9f113eb0362402fcaff79955826f0201195ab707c80dcb8941be6e7fb0ae2fda45008c3751244706255cac350db41fb08e390d1875098a03f0d82a5737498066e0f9752a7cb34ce97006fb4b5ce6a48cd0314700da9ad446f9824bbc9b31a050825f9f68fba373497bd8f0d39b35b0913dbede1f8f6c75691b70fc708bdf3b8be837347aaec4c2d90dade0e1631621a2abab91aa8bfd551d125c0e26322ca8e01562bb909cf1a3c5f4a78ca6cabd5d6b77e6a4098ee456d7bae9982930cd2b77a86653fb9feca26631ec4e40f331da7f1d19e70d36e4db2392a91dcce114d3edb273e48601158f70775f20c3ee81fbe5242cc414fd6cc84273d7a40b0ddbdd43f315c28d6a0a8df9c3ee92f4fbcb4260bcc67e4896a9a4bcec01631722e5854a04c3c0e3459eb0516f6542b18f1bbfd357a1175e4965ffd8454092b47f0b637365345a69b7001b7e17f0d9e8853e20fcc9994376a4f8652296139844952506755d643b83e1f2e78914f3567b6bed8f7738fcfc340cec0c96a02ef0f5005a55c542e11d0d25450aba9c1290068e662c51bbff6f4548cfc8ea2278e716e7ba09e12b77157ef8d4029d1d77e28a4d8467d1aca2f7cb34e4831b9fbca4f75681348c1f74c80d0fb840948c584fce979835d2a75468cf534567c54f5874fb2be6c9ff464c14987a2783a898924fed51e2b7468405ef405040a74d16e336c6d8204b5f5ed5a7ebb92f9d0dfa5c5e88786f6b2b8121e3443820d43e37c4d4e5bf20752cdf06dd4ad40b2be5ffbc168af0231f730a7bf930910eccf53dc04358639d17a2a212533eccf15a7a65e2268471cf9080088dcd61c7995919d8d874614c2e08b00e0859899aa7e5051a2f691aa397361fd0146c0391bd7c3937837307198bb7c487c5345d5843e231e34c63feb9100ad40e4ff98216bf48fb92c679d7400ecd0d5b2129dc0885a948e12db4440d8c36da227277e009cd2afc1f69247dcbfdd4ea214c0bf36ea83dfee48080302d0722624aed84476975215c0578c8dbadc3141e19ebcf1794161e65632039e8114d99759ae7f69085cf44960496b88209fac2ccb94f967c420416abf49389f184358bc34602ef26c01ff747f782858f45a3e71381d52d8330ea97161a7615c82789af8236c614143faf2ece8f1d89079fc410d1f6eef1fa56108f34546e8431da6f723bcf762750ab9543de4219fd24604f1383a5cb0b277c55932cf87bcd602c8e8eb5767c40e0234f54c1067d369c0038e13ae3a0f7b192420eeb9e8a34f212d95f0f65af237db3582c377285f0d30a1c83601858a9b092223d50fc6caeff0560fb96a6ae97cec47db84f5c896259790401943e6df669e2e1564fef65d4805b4b651de72d7008df7b3ede2dd585809a82dc654357fab99c743fbd7ea57f5731ca24c01d793107d76cf030de5a4711921b2eb4eca056ff74985c521de711060661cc6f7fa10acb50c51fa658999ad082b8c19b380e1ffeef10a483a037511d278b768e67faa470c898afd66e8f7131bef178e5de5b5e8e4bb357b750defaeaea571aa4d7d62f524afd6d96179b256c5225bed1117751e08038933e2a90927583db7aa4a5891f43484093cae1cd617c8091ab6dcc43c724eb5f25548d2d0836cf2fbbebb6dcd198c05f474cabe1d2a89f3a8c0121c8dde07f1dc29219991a72a29a9c9bedd5ca7149eb3c162960cdeb1d0e10f99ef0283276b972c26ec5a415e0af23e1a8aa6198175f1a9dc3627cfe1c030ffce31b7ad85cc1ad221a81d43ea09566daa53cda0178d56fd283e87cbf55fec78ff13755499d80a5e16e92ae44add8e55127649050cc9f846bbb3254ecf3eb5bfdab7b9479739ec40436e8d9b7e7b51b0c88cc557974007cb9fc7912fee03ba9807a37024896d70e12f6a867827f486713cdd4fbe44d80596c5e1950f4d5ad23c3e47e52616651995239a18ca991edf904d3f0ae21f087808ac0a02fe8197aff0c89c30c402def56ae30f79588f62013e223e067f6d41a1db4621624980adff1a2caa8d727b94f939bab3013bd0801765b7749198975b2ec04bc16cd7ac1c62e3266f8fd36d6dd083481f6d0fa79abc39775efe05b71db8a794fa561a44ed1da0782a05c03ea264ab917f8649fd77b12759c06993e2078f91fa81b54de4b24057f335eed7c33a6366c4f22d7722051857e3e990619b745c0027ad0ec2758bf6d23bf2dce734212df73d19fc2b02868f9331b2b8463e4b26ce1d9bc79643ab41a5e547375f1fda3cdeb5f6bc044b9150bb709ab4ed9a59717ec6d3dca09adae0d53b424c4607ca9d267536f1f5766a21c9364ff39b3368607e1fbc4821f5253893112e3ef8d42a50b20c211bd47639ff966f72e43c4e8ddb5c53db229448a7f15e24d726ea3ba2bd16e935cf10eef1574d988fa0b121516e5bb26c09c65e2c6e287c2d939a9c218f106a54e9c41563c6ad3cb764c45776a97f9f1e363618c25098feb3d04dbaaa73007a647dc20d40abd80e464391c632162e69aea90f3ca537c343e79f7184bf31b12a8c28e0778e7cff344fdc037577fbc6fdd1d1df480414b247e56cb7cd32a183ec82ee6dcc68c9115ce20c5e5d26ca0a2d64e8ddeb32855ec5e9603d13591d48763adfb1a09919ecf9b3e84eec76d8651d3cc2b16437094fcfe5ee4ec6a5b88767f1b8267d292ff24c84475810ff1159da9a84c1342c2afc81ef968ad41fa8a4ecad57c79c46d5001fd786d539dbf5ef799d500ad830d2063adf966da9be6e0ac6da544a89ce182e3b73956bc2403982f87e451c6bc12e96947db6b6173ae791f5cb37a3e53dbcbb688610b3a2142a3b1a6c536b5bc5548e496c7c67a24de08d8e1877c6991a0073d604333d8f5b86b922ddaefd6f0c5ad7839cb8be26bf6cd1e26aea7990540aef38d57f37cdb2807c739763d5fcd971a26fc422497046fa43e56ae07879043d8b1045ea24d585da367d429d335bea09423b62a24a00c1d15b89b4aee5559c5ade1e2e7c4245a2ea18c92c88c364e1f10c21e88aac8950dc9c574ab4e4b77d8fec385f4789c322a5df3476b32db274fb6ae5296c7c7a3ef64e72d6c68747c3c05baf3936d5d6faeec640b3449b73deecbb485636a5b076baaae635a29b9b28ec42a1eecd31c61b3c35dda37aee2469a4547088b99d356067aeb9ea74bc878d8a64e58819e91f78b9074d3eed2cc81dd1cdeaa67fe4ddf3c6365d3641c9a55b5bc3012ea9caf47da93468b1adbf6e8a78244afdef6ee04d726feff1ed9defc75af366244eda10941b1e3eeb3148a6fe7c861dcb6f1c585cc3ead15c5b7938c286ae5ad3887abf19c59a621ca0f93aca9d3b3fe093a5ce4886559bfb04aa7306c317887ff4697d17f03b0a33c3ea8a8c609dc6bda00002765415a4f20c0051e0e0255cfeebff248417d96d292afce8cb2fd6d2a41714bc64a6916123e480957c85584df187caa2454824b35ab4b1bacd2185440f76492ef4436500", 0x1000}], 0x3, &(0x7f0000001300)=[@iv={0xe0, 0x117, 0x2, 0xcb, "e66e31a5231b88dbd7e7a9e706d3a477bb288f3c93d67ea2a42796c9f817535cf0d9b8e1ca9c46b942493eaba8e8b1890b547b12ed09c71ca5b4a5058a739e1df0a4717cb8c0d2e340d4ad4019fa776295a3979b53896388700ebcfc368d86b8b497e068b1af19d06aed350d595e1d5dee711cdb6515f82510ea758e168662b9e50d2d7f12308298dd5724c8b73e8c50d01bd63a2bc7a0a754b2d9e239133b3d7440721d23005502a83249f974b6cede47b3403e1a29e9e8d3a5f4ad533e957c987245f46db283f3c7ac08"}, @assoc={0x18}], 0xf8, 0x4000000}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)="a1a4012657401cbdc9ec9a979b24d4fe573f6a9ebec1baf03c888c74a1d2d8613f094e14ac40b4c152bbec180c0d9189e3c9c62699edcef8de2e73f82533229b8e9e836291b01b6f19ffb67b5ed7", 0x4e}, {&(0x7f0000001480)="7c6c12be411a46345b0893952b180fc6f36ca80d38448b51e9e8f78d5c59f841786860596647db162c2f7a7dca767649db42e6ba038470c9616ec699661389aa209f32db293c517e9e1217c78a5462f195e6e88143768a06fadeceff734fd7a257335730a48c8c125c05f7b9f51499ee6d139a5051ffc4a12ea971d41005609850c38b6088712fe0fe7073c4f29920e6e83c11c1446b011b4eae440727bed63d5351bb1b9964e1614dca756dc424088200cb6071dd2372f907750ab92a19e447dc6e9e", 0xc3}, {&(0x7f0000000240)="af62983521ec361fd9a9ca452db64640af59b9a07cafab059c4cca96aeb172fe", 0x20}, {&(0x7f0000001580)="32412eb1ff9e8935aaa74bf6ebb9f802b38bd1925c4c98776ab33864553284d6645c0dc0fa005b59f8f26b0c33a210d6a151b84986cdc180c08e2d5247bad57fdd2b5c8e7cbfdd76053446c797ecfe32b50a5164", 0x54}, {&(0x7f0000001600)="1d80b9a2e292c0039fe0116bc0fcdd81c274fc23b4e11d1c1be5cb5911c8000bd94670f4d6bf89780fc2fb74b319546116f55147d5150845d22fe8378da355b2e8e47530f3e99a182b9231e1e3cc029625d77c40f869dae1901740deb227a77944059aff326146673046d455f19c4dedc3b60ba029c7e3f492cf6253c5", 0x7d}, {&(0x7f0000001680)="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", 0x1000}], 0x6, &(0x7f0000002700)=[@iv={0x38, 0x117, 0x2, 0x24, "75970ed00d04db1f159509402efe9f798018d0e3ebbfe313bf2eb869d7e97bf5ccb2b1d6"}], 0x38, 0x20008000}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002740)="86f525bdd67efa87f10391ad3a5b17d784ce9d26ed8837dc6d6f00cc7b48ac6cd9ba75891daffe9ed3efa5c49a949d9d442517e370538dcd71a2cff24d9fb54270290e5825f49a93090dfe", 0x4b}, {&(0x7f00000027c0)="890c2cc5f9eb6095b353660f4195bbf48b6b8b099d86f448fb41", 0x1a}, {&(0x7f0000002800)="c19e6a6bb800f0aa5bbcd15dd3061190e7ca9c13e87c9c6b3ef5ed75dcfcf930c505c38aa09ebd5a24f39a7634e05b2b6e29abd1340d42e2db302df83fecefb6a8c90d552d940e6e4772c2f2129c86995d01439a986393604a7f873e572400345e09dafb640c741a9fde97fd967526fd52582ab3e2d76fa235d7aa3b0bb4ccb094b854824ff7c986e51843bc70ea2861041839651426653b3b855a7614e9ddd65179e3538cf55f2103644cfe392b", 0xae}, {&(0x7f00000028c0)="95df47cdc4b03ab12ec622b7629ae72f6890", 0x12}], 0x4, &(0x7f0000002940)=[@iv={0xf0, 0x117, 0x2, 0xdb, "2a056de7b71cacef0ab48f1b313f22da0b5daac1d840e6dc515ba91c63393eaa79d64914649c730b230be0326d992a82c19268e6a659dc04fd2c22394f1aa906d9d0d32701393629af38d4b0258b374f4f6410d2aa2af18bc9b9433d7ff3cd2fdda7594fd22c124108cc1218f271b51f2db884c3451cd878944e3057544b3cd38f645f013344deea9e392ed0cff066cb4fc1667cb7e2b36cb969617eb5d9abc4f25e2864ea2fce4cc22a4802ee575d71521a47a0d8a1fac656c52910b4fa2cb88bfa9d111a1fd8211f72f0f85d4af5569e9ab28471c084f59b61d8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x462c92bb}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0xc22d59464b073483}], 0x168, 0x8004}], 0x3, 0x48)

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

11:10:46 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x9, 0x6, 0x7ff, 0x59, 0x9, 0x3, 0x9, 0x4}, &(0x7f0000000040)={0x21bf, 0x4, 0x8, 0x40, 0x6a19, 0x9, 0x80, 0x4f}, &(0x7f0000000080)={0x63d8a974, 0x0, 0xec, 0x1, 0x3, 0xfffffffffffffffa, 0x1f, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)

11:10:46 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

11:10:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x7f, 0x93, 0x5, 0x0, 0x2, 0xe, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x8000, 0x2, 0xfc0, 0x4, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x9fe1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r2, 0x1)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:46 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

11:10:46 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000400))

11:10:46 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:46 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}]}})

11:10:46 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x9, 0x6, 0x7ff, 0x59, 0x9, 0x3, 0x9, 0x4}, &(0x7f0000000040)={0x21bf, 0x4, 0x8, 0x40, 0x6a19, 0x9, 0x80, 0x4f}, &(0x7f0000000080)={0x63d8a974, 0x0, 0xec, 0x1, 0x3, 0xfffffffffffffffa, 0x1f, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8}) (async, rerun: 32)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 32)
sched_rr_get_interval(0x0, &(0x7f0000000200)) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)

11:10:47 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)

11:10:47 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x4801)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x7f, 0x93, 0x5, 0x0, 0x2, 0xe, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x8000, 0x2, 0xfc0, 0x4, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x9fe1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r2, 0x1)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x7f, 0x93, 0x5, 0x0, 0x2, 0xe, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x8000, 0x2, 0xfc0, 0x4, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x9fe1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) (async)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r2, 0x1) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:47 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:47 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}, {@smackfshat}]}})

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(0x0, 0x64e, 0x4801)

11:10:47 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000400))

11:10:47 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}]}})

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(0x0, 0x64e, 0x4801)

11:10:47 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}]}})

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800000000000, 0x40080)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x7f, 0x93, 0x5, 0x0, 0x2, 0xe, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x8000, 0x2, 0xfc0, 0x4, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x9fe1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r2, 0x1)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:47 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}})

11:10:47 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(0x0, 0x64e, 0x4801)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800000000000, 0x40080)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:47 executing program 3:
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140))

11:10:47 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140))

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0)

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800000000000, 0x40080)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x400000000, 0x309400)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000240)=0xc, 0x4)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xa7, 0x1, 0x8})
r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/150, &(0x7f0000000400)=0x96)
userfaultfd(0x80800)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2400)
r6 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x40040)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r1})
r7 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x480082)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r3})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 32)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x400000000, 0x309400)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000240)=0xc, 0x4)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xa7, 0x1, 0x8})
r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/150, &(0x7f0000000400)=0x96)
userfaultfd(0x80800)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2400)
r6 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x40040)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r1})
r7 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x480082)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r3})
syz_open_dev$dri(&(0x7f0000000300), 0x400000000, 0x309400) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000240)=0xc, 0x4) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xa7, 0x1, 0x8}) (async)
socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/150, &(0x7f0000000400)=0x96) (async)
userfaultfd(0x80800) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2400) (async)
syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x40040) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x480082) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r3}) (async)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x503001)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x8ef63000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x0)

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x503001)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x8ef63000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x503001) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x4, 0x4}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x8ef63000) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async)

11:10:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x400000000, 0x309400)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000240)=0xc, 0x4) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xa7, 0x1, 0x8})
r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000340)=""/150, &(0x7f0000000400)=0x96)
userfaultfd(0x80800) (async)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2400) (async)
r6 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x40040)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000200)={r1}) (async)
r7 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x480082)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r3})

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8, 0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x0)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x503001)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 32)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x8ef63000) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1})

11:10:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000000), 0x64e, 0x0)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack', 0x1, 0x3)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080))

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram9', 0x1, 0x40)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5})

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2}) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack', 0x1, 0x3)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080))

11:10:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram9', 0x1, 0x40)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})

11:10:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2})

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack', 0x1, 0x3)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080))

11:10:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:47 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x3, 0xdb8})

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram9', 0x1, 0x40)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})

11:10:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:47 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:47 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:47 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:47 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20020}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:47 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:47 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfc', 0x2e900, 0x44)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:48 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4801)

11:10:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x80004)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x1, 0x3, 0x4}}}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000180)=""/52, &(0x7f00000001c0)=0x34)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfc', 0x2e900, 0x44) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfc', 0x2e900, 0x44)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfc', 0x2e900, 0x44) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x80004) (async, rerun: 32)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x1, 0x3, 0x4}}}, 0x18) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000180)=""/52, &(0x7f00000001c0)=0x34)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x4801)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x80004) (async, rerun: 32)
write$P9_ROPEN(r0, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x1, 0x3, 0x4}}}, 0x18) (rerun: 32)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)={r3}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0}) (rerun: 32)
getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000180)=""/52, &(0x7f00000001c0)=0x34) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async)

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8) (async, rerun: 32)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async)

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/b2c2_flexcop_usb', 0x40000, 0xa1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/i2c-dev', 0x8042, 0x28)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000340)={r5})
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r4})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x0, 0x23})
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)=""/104, &(0x7f0000000140)=0x68)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000380)={r8})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
waitid$P_PIDFD(0x3, r2, &(0x7f0000000200), 0x0, 0x0)

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = userfaultfd(0x80000)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r3})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/i2c-dev', 0x8042, 0x28) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, <r4=>0x0}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000340)={r5}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r4})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x0, 0x23}) (async)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)=""/104, &(0x7f0000000140)=0x68)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 32)
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000380)={r8})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000200), 0x0, 0x0)

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = userfaultfd(0x80000)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
userfaultfd(0x80000) (async)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:10:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/i2c-dev', 0x8042, 0x28) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, <r4=>0x0}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000340)={r5})
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r4})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x0, 0x23}) (async)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)=""/104, &(0x7f0000000140)=0x68)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f00000002c0)={r8}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000380)={r8}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
waitid$P_PIDFD(0x3, r2, &(0x7f0000000200), 0x0, 0x0)

11:10:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = userfaultfd(0x80000)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:48 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:10:48 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000))

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:48 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x400, 0x20000020, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=""/44, 0x2c}, &(0x7f00000002c0)=0x40)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x1f, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cryptomgr', 0x8880, 0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000001c0)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:48 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:10:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000))

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x400, 0x20000020, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=""/44, 0x2c}, &(0x7f00000002c0)=0x40) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x1f, 0x0, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cryptomgr', 0x8880, 0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000001c0)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:49 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14)

11:10:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:49 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10040)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async, rerun: 64)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (rerun: 64)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000))

11:10:49 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x400, 0x20000020, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x80c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=""/44, 0x2c}, &(0x7f00000002c0)=0x40) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x1f, 0x0, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cryptomgr', 0x8880, 0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r5}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000001c0)={r1}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x2, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:49 executing program 1:
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))

11:10:49 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

11:10:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x6, 0x10001, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r6})
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140))
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x687, 0x401, 0x3})

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) (async, rerun: 32)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

11:10:49 executing program 1:
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x6, 0x10001, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r6}) (async, rerun: 64)
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)) (async)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x687, 0x401, 0x3}) (rerun: 64)

11:10:49 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil}) (async)

11:10:49 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x260202)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x6, 0x10001, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r6})
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)) (async)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x687, 0x401, 0x3})

11:10:49 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa4, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e1751c2fbdf59109536d7119507658ebca03caedfa5d4a007a40430cb92308b8194fd69f49eb92898709f53d1e7ac1549ee47acad6aefffd5a8e852c61c2ea49151581c3daf01535154138eb1ace0bf92b2535b"}, &(0x7f0000000080)=0xc8)

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x260202)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x260202) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x20, 0x6, 0x8, 0x0, <r0=>0x0})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x3a97, 0xc6f2, 0x1ff})

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

11:10:49 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x260202)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x260202) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x20, 0x6, 0x8, 0x0, <r0=>0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x3a97, 0xc6f2, 0x1ff})

11:10:49 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:49 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x20, 0x6, 0x8, 0x0, <r0=>0x0}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x3a97, 0xc6f2, 0x1ff})

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xfb, 0x400, 0x3, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 1:
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xfb, 0x400, 0x3, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140))

11:10:49 executing program 1:
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x52, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4a1e1f4a31ed48372855a73de914951ca8fc8914bc1550d4686f683ea2f11e5b869b20dcd05b6037e17"}, &(0x7f0000000080)=0x76)

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xfb, 0x400, 0x3, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x69, 0x8, 0x8, 0x0, <r1=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/238, &(0x7f00000003c0)=0xee)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000500)={0x3e, 0x1065, 0x8000020})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r4, &(0x7f0000000480)=""/102, 0x66, 0x2, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r5, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2505000000050012000200000008001700", @ANYRES32=r5, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40040044}, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x6, 0x101000)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))

11:10:49 executing program 1:
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:49 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:49 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:49 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x69, 0x8, 0x8, 0x0, <r1=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/238, &(0x7f00000003c0)=0xee) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000500)={0x3e, 0x1065, 0x8000020}) (async, rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r4 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r4, &(0x7f0000000480)=""/102, 0x66, 0x2, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r5, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2505000000050012000200000008001700", @ANYRES32=r5, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40040044}, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x6, 0x101000) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))

11:10:50 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x20000000400, 0x90000)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000))

11:10:50 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080))

11:10:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x29, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d8755b99dbb672da73a6b6bd8eb993b75ef5ae1d4"}, &(0x7f0000000080)=0x4d)

11:10:50 executing program 0:
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1093406fc9dc95c5, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+-&&/+{\\\'\''}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}, {@appraise}]}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hdpvr', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14011, r0, 0x80000000000000)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:50 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)

11:10:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x69, 0x8, 0x8, 0x0, <r1=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/238, &(0x7f00000003c0)=0xee) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000500)={0x3e, 0x1065, 0x8000020}) (async, rerun: 64)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r4, &(0x7f0000000480)=""/102, 0x66, 0x2, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) (async, rerun: 64)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (rerun: 64)
write$P9_RGETLOCK(r5, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf2505000000050012000200000008001700", @ANYRES32=r5, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40040044}, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x6, 0x101000)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 0:
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1093406fc9dc95c5, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+-&&/+{\\\'\''}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}, {@appraise}]}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hdpvr', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14011, r0, 0x80000000000000)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1093406fc9dc95c5, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+-&&/+{\\\'\''}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}, {@appraise}]}}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hdpvr', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14011, r0, 0x80000000000000) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)

11:10:50 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0)

11:10:50 executing program 0:
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1093406fc9dc95c5, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+-&&/+{\\\'\''}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}, {@appraise}]}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hdpvr', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14011, r0, 0x80000000000000)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1093406fc9dc95c5, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+-&&/+{\\\'\''}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dri/card#\x00'}}, {@appraise}]}}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hdpvr', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14011, r0, 0x80000000000000) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80, 0x8})

11:10:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r4})

11:10:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140), &(0x7f0000000080)=0x24)

11:10:50 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x800f4, 0x80000400, 0x4, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x81, 0x4, 0x10})

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x15, "b2c17ace32bab74231948ef3fc32078ac1b0b39b3d"}, &(0x7f0000000080)=0x39)

11:10:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r4})

11:10:50 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

11:10:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:50 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async, rerun: 32)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4}) (async, rerun: 32)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r4})

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x800f4, 0x80000400, 0x4, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x81, 0x4, 0x10})

11:10:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x80, 0x8})

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x800f4, 0x80000400, 0x4, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x81, 0x4, 0x10})

11:10:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x80, 0x8})

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
r2 = getpid()
move_pages(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000140)=[0x10001], 0x0, 0x0)
move_pages(r2, 0x7, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f000042b000/0xc000)=nil], &(0x7f00000000c0)=[0x8, 0x100, 0x3, 0x42, 0x1], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x440900)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10f4, 0x8, 0x20})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000000)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1000, 0x4, 0x1, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x3})

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x80000001, 0xa4})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xb, "b2c17ace32bab74231948e"}, &(0x7f0000000080)=0x2f)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x80, 0x8})

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x440900)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10f4, 0x8, 0x20}) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async, rerun: 32)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000000) (async, rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0}) (async, rerun: 32)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (rerun: 32)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1000, 0x4, 0x1, 0x0, <r4=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0, <r5=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r5}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x3})

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
r2 = getpid()
move_pages(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000140)=[0x10001], 0x0, 0x0) (async)
move_pages(r2, 0x7, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f000042b000/0xc000)=nil], &(0x7f00000000c0)=[0x8, 0x100, 0x3, 0x42, 0x1], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

11:10:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x0, 0x8})

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) (async)
r2 = getpid()
move_pages(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000140)=[0x10001], 0x0, 0x0) (async)
move_pages(r2, 0x7, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006de000/0x3000)=nil, &(0x7f000042b000/0xc000)=nil], &(0x7f00000000c0)=[0x8, 0x100, 0x3, 0x42, 0x1], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)

11:10:51 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x440900)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10f4, 0x8, 0x20})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000000)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1000, 0x4, 0x1, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x440900) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10f4, 0x8, 0x20}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x100000000) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1000, 0x4, 0x1}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={r5}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x3}) (async)

11:10:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x0, 0x8})

11:10:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x139441)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:51 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x6, "b2c17ace32ba"}, &(0x7f0000000080)=0x2a)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x0, 0x8})

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x139441)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:51 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) (async)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4}) (async)
socket$inet(0x2, 0x1, 0x10000) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80})

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x139441)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x139441) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80})

11:10:51 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4}) (async)
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:51 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80})

11:10:51 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xf2, 0x80})

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil})

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1, "b2"}, &(0x7f0000000080)=0x25)

11:10:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)={r1}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil})

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "b2c17ace"}, &(0x7f0000000080)=0x28)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x20000) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)={r1}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async)

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x2, "b2c1"}, &(0x7f0000000080)=0x26)

11:10:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:51 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

11:10:51 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x2, "b2c1"}, &(0x7f0000000080)=0x26)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)

11:10:52 executing program 4:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 1:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x2, "b2c1"}, &(0x7f0000000080)=0x26)

11:10:52 executing program 4:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 1:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff) (async, rerun: 64)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) (rerun: 64)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
r5 = socket$inet(0x2, 0x1, 0x10000)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x3, "b2c17a"}, &(0x7f0000000080)=0x27)

11:10:52 executing program 4:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 1:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)
syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff) (async)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) (async)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil})

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x3, "b2c17a"}, &(0x7f0000000080)=0x27)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x3, "b2c17a"}, &(0x7f0000000080)=0x27)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2, 0xffff7297, 0x401})

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "b2c17ace"}, 0x0)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil})

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2, 0xffff7297, 0x401})

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x2a00, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x6, 0x32, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3})

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "b2c17ace"}, 0x0)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x2, 0xffff7297, 0x401})

11:10:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x2a00, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x6, 0x32, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3})

11:10:52 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "b2c17ace"}, 0x0)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_prodikeys', 0x60002, 0x1)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x2a00, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x6, 0x32, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x2a00, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x6, 0x32}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r3}) (async)

11:10:52 executing program 3:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0), 0x0)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

11:10:52 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_prodikeys', 0x60002, 0x1)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

11:10:52 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_prodikeys', 0x60002, 0x1)

11:10:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

11:10:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (rerun: 32)

11:10:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:52 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x10000)

11:10:52 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:53 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000200))

11:10:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd01, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000012})

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)

11:10:53 executing program 2:
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044050}, 0x10004)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd01, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000012})
syz_open_dev$dri(&(0x7f0000000040), 0xd01, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000012}) (async)

11:10:53 executing program 2:
socket$inet(0x2, 0x0, 0x10000)

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd01, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000012})
syz_open_dev$dri(&(0x7f0000000040), 0xd01, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000012}) (async)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x8}}, 0x18)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x7, 0x400, 0x4020, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7fff)

11:10:53 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async, rerun: 32)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x8}}, 0x18) (rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x7, 0x400, 0x4020, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82) (async)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6}) (async)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x8}}, 0x18) (async, rerun: 32)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x7, 0x400, 0x4020, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82) (async)
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6}) (async)
accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000) (async)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106) (async)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)) (async)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:53 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x204003fb, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:53 executing program 3:
socket$inet(0x2, 0x1, 0x10000)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})

11:10:53 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x204003fb, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) (async)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x400f4, 0x0, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:53 executing program 3:
socket$inet(0x2, 0x0, 0x10000)

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x204003fb, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})

11:10:53 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil}) (async)

11:10:53 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})

11:10:53 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sch_htb', 0x80000, 0x100)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:53 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0000008})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7, 0xdc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r3, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x29, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x2, 'dh\x00', 0x21, 0x7f, 0x3c}, 0x2c)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3f}, 0xa)

11:10:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil})

11:10:53 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sch_htb', 0x80000, 0x100)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async, rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (rerun: 32)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:53 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0000008}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7, 0xdc}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0}) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r3, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x29, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x2, 'dh\x00', 0x21, 0x7f, 0x3c}, 0x2c) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async, rerun: 64)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3f}, 0xa) (rerun: 64)

11:10:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3fd, 0x8020})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sas_port', 0x28640, 0x35)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:53 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sch_htb', 0x80000, 0x100)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:53 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0000008})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7, 0xdc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r3, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x29, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x2, 'dh\x00', 0x21, 0x7f, 0x3c}, 0x2c)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3f}, 0xa)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0000008}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0x7, 0xdc}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r3, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x29, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x2, 'dh\x00', 0x21, 0x7f, 0x3c}, 0x2c) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3f}, 0xa) (async)

11:10:53 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)

11:10:53 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:53 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x41f, 0x4000)

11:10:53 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x18)

11:10:53 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:53 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)

11:10:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000000, 0x3fc, 0xfffffff9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7fffffff, 0xffff9f22, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2})

11:10:53 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x41f, 0x4000)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000000, 0x3fc, 0xfffffff9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7fffffff, 0xffff9f22, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2})

11:10:54 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x258000, 0x18)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000000, 0x3fc, 0xfffffff9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7fffffff, 0xffff9f22, 0x0, <r2=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2})

11:10:54 executing program 1:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x41f, 0x4000)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x41f, 0x4000) (async)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x258000, 0x18)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000000)=""/80, &(0x7f0000000080)=0x50)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x1, 0x1, 0x7fffffff}, 0x10)

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x258000, 0x18)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000000)=""/80, &(0x7f0000000080)=0x50) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async, rerun: 64)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x1, 0x1, 0x7fffffff}, 0x10) (rerun: 64)

11:10:54 executing program 1:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2) (async)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x0, 0x18)

11:10:54 executing program 1:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 3:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000000)=""/80, &(0x7f0000000080)=0x50)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async, rerun: 32)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x1, 0x1, 0x7fffffff}, 0x10) (rerun: 32)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x0, 0x18)

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="351b4580801a8ca303bf7038c9f03ce28958f58c1ea73ed277fa82955fcfd0da6a6789e243945cfb92d17d7114f69db5a2399a1b3bdddf8f1498b89187c9b7ee9b070ab18b1aff98af1e46b80650b4bbcbd41952ae34a761b21b8523f222d0752930e6107eae33347864c42d2512ec40b8d5af1350451dae69b77bd99b09ea6a89811da8d1686ca7dafe43a6c2fa9227acecfc1961426db5dc8a8cd78168ab0de30d2431dbcd9c5b8b29e52995df6bb95b8eaa3259f2f601ced284172731d23e8f72baba28ebc710075593cb92d4f26ed6a948d7e49288e07919efde1644ca43db4bac7d03fc2e7ee4ed758916f09909803c4fca89a4eebdb04e97b0cb6090d7564f0aa5a833677fd1e62dabe43f1c6232b66ffeb1bfe492ff5d57b2232eaf5e54d037454a695f3de31045a71c083b8f80108b758c18963b0e816e7bca252258807fcc3338aa4e1a37aa0e5c47c48a1be93ecb69abb7300af7118d9cb657015a31cba989caa69f1702b1a627abcac2ce10309186ad8117a51c5564da30e7b72861cc2fe0a0f70a17f40fcc45f36c560edf06e8f7e1596055a200d456ee50610c22c9c917d182be1945c1c5f3185475b9943ee1df111312e5f3c4f1cf60d93319240b6804a16083e0517bdbc18890dc766be8c1475caa1810be4fc246fc401f4c7ece94eaeb00fb19f0098eeb4285a8701bb5550a88122bc258b035328f31f665b67c51d1089c4dc01134a57bee19c769d7f3b21a74b4d4df278be9e80c70c548cf8ed0f7dcdc7d12050263844378922c320855bb2df5f7fe620a374b1631d1fb2de00973aaa5792252feef1bd132d85f5d70f4b2fbfdceda449dbe1ed7b229bf362fbf4b84375b34c9684a578cf23a8bb32757c83008791612854605f77ba42d369a13d51b097daa779ac779d1ce9c5961fce86abd80861eafada1540eaa5bf115e9b87412e0f21073e8b8dba7a20c2ce03b1c774c78e47035cbe4b716e9c99fe97a4e5f8e44478b49b8f216e14c19ecefd31fb949be0fec98cd5576ca73fa66f8899092b0c852f30f01f584418f67cc387ae8f62c59b6d7a37de00f54ee938c7e3fe630d7256eb6ec3ddacb12faea51f360afaac4ff9e1b93954bccadc05756db92addb053bc4db34bb577bbcfede9bf21765b58a65bcf62cf4e07ac80dbc6e77df8659b85c73dcebd7944e3caf3a51387dab921799632a70e9afbb7c62092fae68169ce5637d9fc17149a25df4155b75a52d710a68ca5a91211a6e853c518f5beb6ca2318f465d27572c620d330b253dc1109feeb1458b2be516919ef3261cd82e2f20140c9abec9be09e91898c54430e153642c43eae92201846e33a8fd3ef789c5e61eeb90e622dbf28f82d8b7dacf7b00fce1a5e964e0ae9223fe99747bb81eb4bfb053d503fc651349e22081d96de18072eb111df4f3e458e4d5a29b8a950191b978eb73fb986970f863c9a727ca5f1ef844ea0a617bdd0c3aa546140f5d5b64500b47dff0976e56d45c8a37c33e9dda09851e4c822af60253bcdb4a5c6a860151b5857ead00badf2300717ed724cde90e6be41ecb8d2109237f3215f0cd894eb42f655a745e15659dd543cbe12261838a51b942a52baa5a5512233ce4e9459d0a4d887bcf5df5a55de618688497b1a79a97298da8675ea34294df2f39064634ba4568d3988a1b01e8c37752848dcde12b1ee2e6df5c87dce19b4258fc74f02dd79c8777b4526d5811616e34b1664f52f5ef9702a26b69e1ea0a2705ed74e3501b065e5060ffa72763f19af3d678a0897140377285b09eb922f33d1297c325559253de2290dcacbfff87e2ce7bc6b179de325c5ba8c67d2087e12d6991a219bfac3c8b75541a6df4ee86bf3203e27c15ae0e1a3478beede4204757f12f4dcf2f8bd1d7115b84207b43e224a783d6527c2eaa6b5c222ae0c9331193fdfc160bfec033d99b0a0967ed1c1d6a8408517d3412b3ce80ed0aaae2125e2d9aa773cf3d89c61595776182261654f1be2ffb4efb27700a7ea7c43d6f6e6ba387e0631d0a5ff60b06797ffbacdff2ce3167b6b2d94c54a992448139d77d4acda601eda36ac78f9c82a851a52a3ad5b19dcda2a261384067e208d56cdbde4db3fd8f9cd3f1848535f429fa98ccee1d164d43af84823ecd4cea7c461539c65618b6cc04a7c19d7edaf53b43ba87d2bbb9824378168a81d63ec84491611bf3a88520c6058b9897cac3437e84b90ca35f9908380ca216a05226f05602ac91f288fb3beb22963cc602e41e31ddd136c741c8315e10cd421b9cefcb053fdd0551e67eae3d85680cf5191d67f58b9bd92dfdb9bbc85c350342ab3e3b17e715a193623279e264b6cd405a93be185b607e3f9d95f1d9444ed9c2a71298c06d63d6e2f29f4d29b5fca0b1aceeb77f62a4616fdfea7aabad4d2c754414d7939b891e2c1208bffff0056609b1ae1ef159e6d7acc116aec963702ebb80d141ae52abfb3d5d129587133fadaec0bb363ffd7bcac2f6b6389540436d89ad13de5c889ddb60ce4c4f538ae43fc7a6a0e4749747fefd3da99d4399e6d3e08064ba51c3209b231413b6f733a6ee26094df31ab1ea727c61dc3687155781872fcc65afe765a316ca65877d1b5cbe1dfea286effe2a10828c7bd1b38bab087dfd7469cfcf97f32a045460f584656095f9be80a8b1ffdc8c33b4f974efff473e5275c62e72ab22bb5b664a5de11be13fcd21925584db04285295355c5f7964dc5b8e0b7c054081c5978ec43ea973d9ab9ab86e1ce1e9a7b9069a23247b322b4a1d0910e15f2cd87203dde691b7ab0e604fdf1fe0fb88a63c969610107c25171ad7329b289c3cf935da5cbd2299a0f9f4d11648a23178c1502e1c4190d60e661db83f63fb7d6dea36667d969bb24ba36495b48d5d58357dce2f00b305066430937039e466ae6fc549cae4aa8ae703ad627c030d0bf7ee5b71d4b2e0589994de2e8deb55c9868dc8c0305f6bd35a07db06bc24f66047b354c02c18a936029e9b8b69e81ecd0537f0679b4347d65a4d498657f3b0ad895669afe48797d90c0ee736d3c1031109ccf38412547bffff8796110195f34ae77f4f8255639f5600f8bb3466bd77940216cd8c238e8057f29c4066c079bfe94e3b07c38ec9ecd40beb8e759a66bdaefae63a8e37b4d7a98d8728456884ff9b7d3959d52bbea543c6bbedb99e8bf706f59d1c086e107875c64a6572ad954af6881a7b96cacb3501717263a00769d7b606075bb3ef7c46f78d76bf130b6fbec69fdedcca20e02944e8dfc1e7786c4828e777618fd6eeffa40a6c6de2418e2b3e4d851c865f79ad0efa15be2e33bdb260b6f22bb9846939f49846439eeac42b53445150be7768f4ac16c790891a9a807ffd2314220d7c6b331a4166422c4e5cb61403342e103887e1bc2e2dc9eb124574cd25797ec29a7ecb7ffa34f083c7dbb5fc7c49546149db9056800fc6de6745dbaf8a961ae8dce0bbb3bf15bad6ecad75be12985a07f5410c03fb193ddb2a498e8042660c17eebe703a6c8188341b0e6fadd6736d433128c7a8d4c67aba2fb27147a0f4b43c761c875ea8fbbbda30e17ce2fac56e9ea46cd8ef2b26c000b9124f360ae013258f09de754a1efd597686b8a0aec1614d13a1c22ab9c1dd1c1c511df27751dfa70772e1eff73f10c7984c43b18db4f825e6ff7bca22864415ddb6c77a46baf6e21c9c46aef40a8f447c60e3d978425ad6c6fa0f02ff64fbde4ebfa9c02e87b63c0d04a6f7b92c253da7f8d8b47bf14322c18171974bd5d67b11b40a26d94cff13bbc26ee46990a9cdf81d3c6229964e31a2f3185f5d28c2dcd9906242c43d79b3cc1c35983287cbead5c78d8e044bc3329112e25a4e4a7ea2f5bab2adaf7a339d4fcb9c594c8171318cd7d2e5eaf14a93afc8ca7f22a35449372d183ba05b85c1be31284e3fe6c710ae7999f197224918dccd1c7f1adc617952c5e392af86e9fd1efc5f742f91e73ac0a2618b3ecd6fdc116415ca04c0b9631724809edb3cf91525bc2e4a52fe29611bb8cf574b4c7d9e4d4a399cddb0dd9cbe9e42e0cd9622089e5cc5c62f9434da5fd43fe2f6dd85c1181e0db9119512f91b3367eb342c32d61cbd8786c212706b9c145e889df9a7976652ed86b9a1a49286cfe050160ac73222658bde052e1765a64f02904260ab79c0c9bd84a397c4677f59d42e8de21ab76a978b5ea2fc1386082dd5b39382b4e1a87932fd29bba1666a54c5b0a327583f9ec52d23c09177cdffacceb5e2dd8a6c243088ca86156d837600a5f85f69b3e4127a47c5b312271c25ed299485f5bcce9d4f87a95d05c42f5589292487b10a26f89780dc94d4b34e26c884f62a098ddf3e2aff5b8d6d6d11834f22a3f14ae55e9b829e824b8cf4d47286d1571148802b3eec640310ccb859148d006f4b0089f3bad4a9e297988b0e7d3a803ca63c34c775764bf1ecf095edecaf0b49c20a0214caf69457d70fee887fd3d416ac957a4577dee74047a02e8cbdba06d5d97ca0af094741e4c5ca683ddeca806d040e30ae319e30ae654943f41c6eca494b3842c8150777b28e33dc40c862324d71e8b8e1b17a9a8ac39eda6246b1ed043b49bfc2e64f71ec294ff9485f430940a1e64919c0105d79f9960c88820ad2a801e1f1452e9315f25a30e366a1b363ce8ead9a56d82adaa5ee76ef00ac8830edd2fea989ead2e7b93029ef9af6e3182d6f4ae49c38daf2cf271377a908d97533705ea7dcaadb844cddfe9ef9e956340d953cde94266601c125a0d62c018ac272b2960a3e5c673ba3e9d8dd66d2ae7e9791951965c0d753c3bff811ddd361cc30c2903953c4d5eb7a83d32b558f4d3b491732e71478dfc19818907306ac0072af53a6aba001a6283a3e710149458c115222571bedf943e41f94a36627db21aa4d032717ce0af76460429924a3c85c50c127d0f95ae722c08947a02cf874304e667aa3bed49e39005c9c330a7676a53a8afde3e12614d3d52a8dcee17f173f941f4b68186c7f4cee62a710fcb3d7849b1408ad5ab10eec17b8891e9862bf75e2f1b1a96504ed63897da201fdf72d813cc37086e051021dd01075d2905aefbc93bb54c889826266feb2609ee17755d78e5711fbcacb0d33a50b624a8215fa8e4e94764920f00f6d2bb5d44cbcfc1a2a1f47676f65a88de31099a8ae0732effcd205499cbb11fd41b3e898724638a55758f73a506f777ec33078e7f0e5afa4b2f12d94fc90829717610c250c65e58c7d5784f8d3d1e98c65a93906f7ca16d745fc5d53ab4bd6c2a2257bb720b1e4625c5d518a38ee8c4555e85050d8871053d3a613cb2ae4c3517b7a98993628accc4846fbfbf4e836b3867a48fccbbfc7307d7b14079d92ea6e55b79af5f60bc04998ac982e7b17490aaffa53aceb051921a2cde64c4b766fb9869ea5eb665f61c5f1c353d9698a177f87ee4c1b7c6343a91b85770d2f48c6a07409f9606e1aef9ef8fd35a19ee24a92bfdff7496d266381287f90380240f95f2225003b45b023c85d5ddd42109ff91ae913192bc34d68844a17f14610f84f7a759d41c39848fe16072a424f2d39f4ecef11dafc0f1c4e111b8bc955e12d1a5302100d7785eace05d9bf86697291b7e998d887adfc3966704fef0a1b03112d51c8099311e35d9dc455dd8df26c110bad1665e474c9fd85452e8d20e2c38bb26130cf6b247c2d165e8f1dbd46b23e5da3131492290c3cd4ac3ef79aa1a795eadcdcc0b9b9fe15055442cf9d6b228b8b2e52754c3d5b1de7e1f4e6b0bf454a21416e10", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
getpid() (async)
getpriority(0x0, r2) (async)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff) (async)
userfaultfd(0x0) (async)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4}) (async)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x0, 0x18)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_diolan_u2c', 0x258000, 0x0)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000000280)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:54 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="351b4580801a8ca303bf7038c9f03ce28958f58c1ea73ed277fa82955fcfd0da6a6789e243945cfb92d17d7114f69db5a2399a1b3bdddf8f1498b89187c9b7ee9b070ab18b1aff98af1e46b80650b4bbcbd41952ae34a761b21b8523f222d0752930e6107eae33347864c42d2512ec40b8d5af1350451dae69b77bd99b09ea6a89811da8d1686ca7dafe43a6c2fa9227acecfc1961426db5dc8a8cd78168ab0de30d2431dbcd9c5b8b29e52995df6bb95b8eaa3259f2f601ced284172731d23e8f72baba28ebc710075593cb92d4f26ed6a948d7e49288e07919efde1644ca43db4bac7d03fc2e7ee4ed758916f09909803c4fca89a4eebdb04e97b0cb6090d7564f0aa5a833677fd1e62dabe43f1c6232b66ffeb1bfe492ff5d57b2232eaf5e54d037454a695f3de31045a71c083b8f80108b758c18963b0e816e7bca252258807fcc3338aa4e1a37aa0e5c47c48a1be93ecb69abb7300af7118d9cb657015a31cba989caa69f1702b1a627abcac2ce10309186ad8117a51c5564da30e7b72861cc2fe0a0f70a17f40fcc45f36c560edf06e8f7e1596055a200d456ee50610c22c9c917d182be1945c1c5f3185475b9943ee1df111312e5f3c4f1cf60d93319240b6804a16083e0517bdbc18890dc766be8c1475caa1810be4fc246fc401f4c7ece94eaeb00fb19f0098eeb4285a8701bb5550a88122bc258b035328f31f665b67c51d1089c4dc01134a57bee19c769d7f3b21a74b4d4df278be9e80c70c548cf8ed0f7dcdc7d12050263844378922c320855bb2df5f7fe620a374b1631d1fb2de00973aaa5792252feef1bd132d85f5d70f4b2fbfdceda449dbe1ed7b229bf362fbf4b84375b34c9684a578cf23a8bb32757c83008791612854605f77ba42d369a13d51b097daa779ac779d1ce9c5961fce86abd80861eafada1540eaa5bf115e9b87412e0f21073e8b8dba7a20c2ce03b1c774c78e47035cbe4b716e9c99fe97a4e5f8e44478b49b8f216e14c19ecefd31fb949be0fec98cd5576ca73fa66f8899092b0c852f30f01f584418f67cc387ae8f62c59b6d7a37de00f54ee938c7e3fe630d7256eb6ec3ddacb12faea51f360afaac4ff9e1b93954bccadc05756db92addb053bc4db34bb577bbcfede9bf21765b58a65bcf62cf4e07ac80dbc6e77df8659b85c73dcebd7944e3caf3a51387dab921799632a70e9afbb7c62092fae68169ce5637d9fc17149a25df4155b75a52d710a68ca5a91211a6e853c518f5beb6ca2318f465d27572c620d330b253dc1109feeb1458b2be516919ef3261cd82e2f20140c9abec9be09e91898c54430e153642c43eae92201846e33a8fd3ef789c5e61eeb90e622dbf28f82d8b7dacf7b00fce1a5e964e0ae9223fe99747bb81eb4bfb053d503fc651349e22081d96de18072eb111df4f3e458e4d5a29b8a950191b978eb73fb986970f863c9a727ca5f1ef844ea0a617bdd0c3aa546140f5d5b64500b47dff0976e56d45c8a37c33e9dda09851e4c822af60253bcdb4a5c6a860151b5857ead00badf2300717ed724cde90e6be41ecb8d2109237f3215f0cd894eb42f655a745e15659dd543cbe12261838a51b942a52baa5a5512233ce4e9459d0a4d887bcf5df5a55de618688497b1a79a97298da8675ea34294df2f39064634ba4568d3988a1b01e8c37752848dcde12b1ee2e6df5c87dce19b4258fc74f02dd79c8777b4526d5811616e34b1664f52f5ef9702a26b69e1ea0a2705ed74e3501b065e5060ffa72763f19af3d678a0897140377285b09eb922f33d1297c325559253de2290dcacbfff87e2ce7bc6b179de325c5ba8c67d2087e12d6991a219bfac3c8b75541a6df4ee86bf3203e27c15ae0e1a3478beede4204757f12f4dcf2f8bd1d7115b84207b43e224a783d6527c2eaa6b5c222ae0c9331193fdfc160bfec033d99b0a0967ed1c1d6a8408517d3412b3ce80ed0aaae2125e2d9aa773cf3d89c61595776182261654f1be2ffb4efb27700a7ea7c43d6f6e6ba387e0631d0a5ff60b06797ffbacdff2ce3167b6b2d94c54a992448139d77d4acda601eda36ac78f9c82a851a52a3ad5b19dcda2a261384067e208d56cdbde4db3fd8f9cd3f1848535f429fa98ccee1d164d43af84823ecd4cea7c461539c65618b6cc04a7c19d7edaf53b43ba87d2bbb9824378168a81d63ec84491611bf3a88520c6058b9897cac3437e84b90ca35f9908380ca216a05226f05602ac91f288fb3beb22963cc602e41e31ddd136c741c8315e10cd421b9cefcb053fdd0551e67eae3d85680cf5191d67f58b9bd92dfdb9bbc85c350342ab3e3b17e715a193623279e264b6cd405a93be185b607e3f9d95f1d9444ed9c2a71298c06d63d6e2f29f4d29b5fca0b1aceeb77f62a4616fdfea7aabad4d2c754414d7939b891e2c1208bffff0056609b1ae1ef159e6d7acc116aec963702ebb80d141ae52abfb3d5d129587133fadaec0bb363ffd7bcac2f6b6389540436d89ad13de5c889ddb60ce4c4f538ae43fc7a6a0e4749747fefd3da99d4399e6d3e08064ba51c3209b231413b6f733a6ee26094df31ab1ea727c61dc3687155781872fcc65afe765a316ca65877d1b5cbe1dfea286effe2a10828c7bd1b38bab087dfd7469cfcf97f32a045460f584656095f9be80a8b1ffdc8c33b4f974efff473e5275c62e72ab22bb5b664a5de11be13fcd21925584db04285295355c5f7964dc5b8e0b7c054081c5978ec43ea973d9ab9ab86e1ce1e9a7b9069a23247b322b4a1d0910e15f2cd87203dde691b7ab0e604fdf1fe0fb88a63c969610107c25171ad7329b289c3cf935da5cbd2299a0f9f4d11648a23178c1502e1c4190d60e661db83f63fb7d6dea36667d969bb24ba36495b48d5d58357dce2f00b305066430937039e466ae6fc549cae4aa8ae703ad627c030d0bf7ee5b71d4b2e0589994de2e8deb55c9868dc8c0305f6bd35a07db06bc24f66047b354c02c18a936029e9b8b69e81ecd0537f0679b4347d65a4d498657f3b0ad895669afe48797d90c0ee736d3c1031109ccf38412547bffff8796110195f34ae77f4f8255639f5600f8bb3466bd77940216cd8c238e8057f29c4066c079bfe94e3b07c38ec9ecd40beb8e759a66bdaefae63a8e37b4d7a98d8728456884ff9b7d3959d52bbea543c6bbedb99e8bf706f59d1c086e107875c64a6572ad954af6881a7b96cacb3501717263a00769d7b606075bb3ef7c46f78d76bf130b6fbec69fdedcca20e02944e8dfc1e7786c4828e777618fd6eeffa40a6c6de2418e2b3e4d851c865f79ad0efa15be2e33bdb260b6f22bb9846939f49846439eeac42b53445150be7768f4ac16c790891a9a807ffd2314220d7c6b331a4166422c4e5cb61403342e103887e1bc2e2dc9eb124574cd25797ec29a7ecb7ffa34f083c7dbb5fc7c49546149db9056800fc6de6745dbaf8a961ae8dce0bbb3bf15bad6ecad75be12985a07f5410c03fb193ddb2a498e8042660c17eebe703a6c8188341b0e6fadd6736d433128c7a8d4c67aba2fb27147a0f4b43c761c875ea8fbbbda30e17ce2fac56e9ea46cd8ef2b26c000b9124f360ae013258f09de754a1efd597686b8a0aec1614d13a1c22ab9c1dd1c1c511df27751dfa70772e1eff73f10c7984c43b18db4f825e6ff7bca22864415ddb6c77a46baf6e21c9c46aef40a8f447c60e3d978425ad6c6fa0f02ff64fbde4ebfa9c02e87b63c0d04a6f7b92c253da7f8d8b47bf14322c18171974bd5d67b11b40a26d94cff13bbc26ee46990a9cdf81d3c6229964e31a2f3185f5d28c2dcd9906242c43d79b3cc1c35983287cbead5c78d8e044bc3329112e25a4e4a7ea2f5bab2adaf7a339d4fcb9c594c8171318cd7d2e5eaf14a93afc8ca7f22a35449372d183ba05b85c1be31284e3fe6c710ae7999f197224918dccd1c7f1adc617952c5e392af86e9fd1efc5f742f91e73ac0a2618b3ecd6fdc116415ca04c0b9631724809edb3cf91525bc2e4a52fe29611bb8cf574b4c7d9e4d4a399cddb0dd9cbe9e42e0cd9622089e5cc5c62f9434da5fd43fe2f6dd85c1181e0db9119512f91b3367eb342c32d61cbd8786c212706b9c145e889df9a7976652ed86b9a1a49286cfe050160ac73222658bde052e1765a64f02904260ab79c0c9bd84a397c4677f59d42e8de21ab76a978b5ea2fc1386082dd5b39382b4e1a87932fd29bba1666a54c5b0a327583f9ec52d23c09177cdffacceb5e2dd8a6c243088ca86156d837600a5f85f69b3e4127a47c5b312271c25ed299485f5bcce9d4f87a95d05c42f5589292487b10a26f89780dc94d4b34e26c884f62a098ddf3e2aff5b8d6d6d11834f22a3f14ae55e9b829e824b8cf4d47286d1571148802b3eec640310ccb859148d006f4b0089f3bad4a9e297988b0e7d3a803ca63c34c775764bf1ecf095edecaf0b49c20a0214caf69457d70fee887fd3d416ac957a4577dee74047a02e8cbdba06d5d97ca0af094741e4c5ca683ddeca806d040e30ae319e30ae654943f41c6eca494b3842c8150777b28e33dc40c862324d71e8b8e1b17a9a8ac39eda6246b1ed043b49bfc2e64f71ec294ff9485f430940a1e64919c0105d79f9960c88820ad2a801e1f1452e9315f25a30e366a1b363ce8ead9a56d82adaa5ee76ef00ac8830edd2fea989ead2e7b93029ef9af6e3182d6f4ae49c38daf2cf271377a908d97533705ea7dcaadb844cddfe9ef9e956340d953cde94266601c125a0d62c018ac272b2960a3e5c673ba3e9d8dd66d2ae7e9791951965c0d753c3bff811ddd361cc30c2903953c4d5eb7a83d32b558f4d3b491732e71478dfc19818907306ac0072af53a6aba001a6283a3e710149458c115222571bedf943e41f94a36627db21aa4d032717ce0af76460429924a3c85c50c127d0f95ae722c08947a02cf874304e667aa3bed49e39005c9c330a7676a53a8afde3e12614d3d52a8dcee17f173f941f4b68186c7f4cee62a710fcb3d7849b1408ad5ab10eec17b8891e9862bf75e2f1b1a96504ed63897da201fdf72d813cc37086e051021dd01075d2905aefbc93bb54c889826266feb2609ee17755d78e5711fbcacb0d33a50b624a8215fa8e4e94764920f00f6d2bb5d44cbcfc1a2a1f47676f65a88de31099a8ae0732effcd205499cbb11fd41b3e898724638a55758f73a506f777ec33078e7f0e5afa4b2f12d94fc90829717610c250c65e58c7d5784f8d3d1e98c65a93906f7ca16d745fc5d53ab4bd6c2a2257bb720b1e4625c5d518a38ee8c4555e85050d8871053d3a613cb2ae4c3517b7a98993628accc4846fbfbf4e836b3867a48fccbbfc7307d7b14079d92ea6e55b79af5f60bc04998ac982e7b17490aaffa53aceb051921a2cde64c4b766fb9869ea5eb665f61c5f1c353d9698a177f87ee4c1b7c6343a91b85770d2f48c6a07409f9606e1aef9ef8fd35a19ee24a92bfdff7496d266381287f90380240f95f2225003b45b023c85d5ddd42109ff91ae913192bc34d68844a17f14610f84f7a759d41c39848fe16072a424f2d39f4ecef11dafc0f1c4e111b8bc955e12d1a5302100d7785eace05d9bf86697291b7e998d887adfc3966704fef0a1b03112d51c8099311e35d9dc455dd8df26c110bad1665e474c9fd85452e8d20e2c38bb26130cf6b247c2d165e8f1dbd46b23e5da3131492290c3cd4ac3ef79aa1a795eadcdcc0b9b9fe15055442cf9d6b228b8b2e52754c3d5b1de7e1f4e6b0bf454a21416e10", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r4})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x7, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x7, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x7, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2}) (async)

11:10:54 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
r2 = getpid()
getpriority(0x0, r2)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
timer_create(0x6, &(0x7f0000000000)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000580)="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", &(0x7f0000000140)="8ecd757263f4b645a65d927a10e546185ed39113573df7973e29507fe48b7f26f3dae8e4a6825bee565c9a759f96c841ee322f3218489eba0b6196802287084520fee81c3c883e93b44fe676dbaf1fd4a77099ab4e0e86a7158d5da366b51b28bb7beac00e87782661fb6c4b86121353f237bba9c27f0bd9af9b5beaa17279dd867126a0729cc420ad3a4df80d7257f99be55d546e36cf8a62a125144eacd469f953908f97577980ab9f116161b24218164d99975b262aae7e0e4d61fefd57ba02a3dc9e26c770513b097691a9b75c09"}}, &(0x7f00000000c0))

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
userfaultfd(0x0)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:54 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

11:10:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x7, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x7, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2}) (async)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:54 executing program 2:
socket$inet(0x2, 0x0, 0x0)

11:10:54 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)
userfaultfd(0x0)

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getpid()
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:54 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:54 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:54 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:54 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x200400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
r1 = getpid()
getpriority(0x0, r1)

11:10:55 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000540)={r0})

11:10:55 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='.!d\x00')

11:10:55 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getpriority(0x0, 0x0)

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040))
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x8000024, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x1000, 0xfffffffb, 0x8})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddb9fff3897d3ccda110eb942cadf2508000000080017003605f5598e93064a4b01c9f9a75ae4540a3d2f29ff21732176385d9e4d6e4383f28bb57d60d3a8445b3a378ae532b664362d8063b0ff363c6ef0b73780e47def3b33c955d873eba3fa9186d2a49f6f9f900dccd58ea8eadadcdc2eae974ab0b841ea1281e3d1cfd987a399e029a82a4e8d8fc533223e614b", @ANYRES32=r4, @ANYBLOB="050021000000000014001f00fe80000000000000000000000000002308000c0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x801)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:55 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getpriority(0x0, 0x0)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='.!d\x00')
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='.!d\x00') (async)

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x0, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7fff)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) (async)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x8000024, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x1000, 0xfffffffb, 0x8}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddb9fff3897d3ccda110eb942cadf2508000000080017003605f5598e93064a4b01c9f9a75ae4540a3d2f29ff21732176385d9e4d6e4383f28bb57d60d3a8445b3a378ae532b664362d8063b0ff363c6ef0b73780e47def3b33c955d873eba3fa9186d2a49f6f9f900dccd58ea8eadadcdc2eae974ab0b841ea1281e3d1cfd987a399e029a82a4e8d8fc533223e614b", @ANYRES32=r4, @ANYBLOB="050021000000000014001f00fe80000000000000000000000000002308000c0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x801) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000300)=0x6, 0x4)

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getpriority(0x0, 0x0)

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7fff)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='.!d\x00')

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7fff)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040))
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x8000024, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x1000, 0xfffffffb, 0x8})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddb9fff3897d3ccda110eb942cadf2508000000080017003605f5598e93064a4b01c9f9a75ae4540a3d2f29ff21732176385d9e4d6e4383f28bb57d60d3a8445b3a378ae532b664362d8063b0ff363c6ef0b73780e47def3b33c955d873eba3fa9186d2a49f6f9f900dccd58ea8eadadcdc2eae974ab0b841ea1281e3d1cfd987a399e029a82a4e8d8fc533223e614b", @ANYRES32=r4, @ANYBLOB="050021000000000014001f00fe80000000000000000000000000002308000c0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x801)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) (async)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x8000024}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x1000, 0xfffffffb, 0x8}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddb9fff3897d3ccda110eb942cadf2508000000080017003605f5598e93064a4b01c9f9a75ae4540a3d2f29ff21732176385d9e4d6e4383f28bb57d60d3a8445b3a378ae532b664362d8063b0ff363c6ef0b73780e47def3b33c955d873eba3fa9186d2a49f6f9f900dccd58ea8eadadcdc2eae974ab0b841ea1281e3d1cfd987a399e029a82a4e8d8fc533223e614b", @ANYRES32=r4, @ANYBLOB="050021000000000014001f00fe80000000000000000000000000002308000c0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x801) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iscsi_host', 0x301a80, 0x0)
r0 = getpid()
getpriority(0x0, r0)

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)
getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x7fff)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x220080)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/qat_c3xxx', 0x440, 0x106)

11:10:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = getpid()
getpriority(0x0, r0)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x220080)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x220080) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) (async)

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x7fff)

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)

11:10:55 executing program 1:
r0 = getpid()
getpriority(0x0, r0)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0x7fff)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x220080)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0))

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})
accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x7fff)

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:55 executing program 1:
getpid()
getpriority(0x0, 0x0)

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7fff)

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:55 executing program 1:
getpid()
getpriority(0x0, 0x0)

11:10:55 executing program 5:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7fff)

11:10:55 executing program 5:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000140), 0x0) (async)
syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"]) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3}) (async)

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:55 executing program 1:
getpid()
getpriority(0x0, 0x0)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7fff)

11:10:55 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:55 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:55 executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0)

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 5:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) (async)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0) (async)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"]) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0}) (async)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:55 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:55 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0}) (async)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:55 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:55 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:55 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x0, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0xfffffffffffffffd, 0x23ca82)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:55 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:55 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4})

11:10:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4})

11:10:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:56 executing program 0:
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x2}, 0xfb}}, 0x18)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:56 executing program 0:
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x2}, 0xfb}}, 0x18) (async)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x119c02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x8, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 0:
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x80, 0x2, 0x2}, 0xfb}}, 0x18) (async)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x119c02) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x8, 0x20, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x2)

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x80000001, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/l2tp_netlink', 0x121800, 0x100)
getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4526, 0x5, 0xd})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0))
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r6 = syz_open_dev$dri(&(0x7f0000000340), 0x100000000, 0x82503)
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil})

11:10:56 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x119c02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x8, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x119c02) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x8, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async)

11:10:56 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0))

11:10:56 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e})
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x80000001, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/l2tp_netlink', 0x121800, 0x100)
getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4526, 0x5, 0xd})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0))
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r6 = syz_open_dev$dri(&(0x7f0000000340), 0x100000000, 0x82503)
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x80000001}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/l2tp_netlink', 0x121800, 0x100) (async)
getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4526, 0x5, 0xd}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)) (async)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) (async)
syz_open_dev$dri(&(0x7f0000000340), 0x100000000, 0x82503) (async)
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async)

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:56 executing program 5:
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/136, 0x88, 0x0, &(0x7f0000000200)=""/48, 0x30}, &(0x7f00000002c0)=0x40)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x20, 0x0, <r2=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})

11:10:56 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e}) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x80000001, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r3}) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/l2tp_netlink', 0x121800, 0x100)
getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, 0x4526, 0x5, 0xd}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0))
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8)
r6 = syz_open_dev$dri(&(0x7f0000000340), 0x100000000, 0x82503)
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil})

11:10:56 executing program 5:
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/136, 0x88, 0x0, &(0x7f0000000200)=""/48, 0x30}, &(0x7f00000002c0)=0x40) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x20, 0x0, <r2=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])

11:10:56 executing program 5:
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/136, 0x88, 0x0, &(0x7f0000000200)=""/48, 0x30}, &(0x7f00000002c0)=0x40)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x20, 0x0, <r2=>0x0})
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2})
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/136, 0x88, 0x0, &(0x7f0000000200)=""/48, 0x30}, &(0x7f00000002c0)=0x40) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x9, 0x400, 0x20}) (async)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000540)={r2}) (async)

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000800, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=client,aname=/dev/dri/card#\x00,privport,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="298658ed31c878743d726f6ff64e00"])

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

11:10:56 executing program 1:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 5:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0xa0d52000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ff5000/0x1000)=nil, 0x1000})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3817f7f08fa8c09b89bd70009ffe74626ce03245000000000000000000000000000004d20200320008001d00ff030000520001007368613235362d617678320000000000000000000000000000000000000000000000006d0000000000000000000000000000000050000000a072706fbd2cdc088f49000008001e00400000008001110000000000000000000000000000000001ff0100000000000000000000000000016401010000000000000000000000000064010102000000000000000000000000330200000235000002000a00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000ff02000000000000000000002e1800016c0400000735000002000a0064010101000000000000000000000000fc00000000000000000000000000000000000000000000000000ffffac141417fc0100000000000000000000000000002b030000ff34000008000200fc020000000000000000000000000001e000000100000000000000000000000000000000000001fc00000000000000000600000000000000010000003500000a00020000000000000000000000000000000001ac14141800000000ba00000000000000e0000001000000000000000000000000e0000002000000000000000000000000ff030000ffb74c1b0e2eed4c4b0013000a01010200000000000500000000000000010000000000000000000000000001000000000a000000b482e342bc25a4431c00d5dbd3c19125395334ec308df9d247f1f3acd7bb82e42ae45e8f51b4195275f0e454f1490fc67f7651979720173d74b042a7fb90b5b5875bc23fb24322b858b28ccfce0934a605455c4527f10691403648d03f09c4b4be3948e19063b032b07082670bc8ee5e34272b6b205cf02805b7e72c1e5cbd151b0ba2420fe01760d5daa94d2c2b6ef8cde169b622ca4cd5ee554cc493c21a0e5d417045a2e056543f1ef33f79565f57785b5df42696908fff2f93cde0aa510240b9ea05f88540f8a64fb1df58a53a7399f7b43ad8525294ed699028b39226a0f8c4c9e1849d9c310000000000000000b9e4803331d588edc63640e32b3d78dda2fb750372833ac5ecde62ea07733dec21e1a97c0522e83689f7b6fae3d567c9cb210585241f6b43675c4228256615523ea232d65c7ee3e7f75e08e86a05fc8e92f191ca93b534cbdb1ef103b5e9246b1ab84fe0575b9880c8a360e4fc11a03256b20687f89f997edeaf0946fe7cab758d247d5c48c3308a507344f911841486e6b3d56e56d88f1b72e4963f1f66ed78b40de67dafcb7bc0c66f72f0fd6fc349f989a2d1c48dc16a10b74b8512764929195b36b7f04c"], 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x8030)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000e, 0x8010, r0, 0xbb48b000)
connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @any, 0x1}, 0xfffffffffffffcf2)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

11:10:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)
syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x408000)

11:10:56 executing program 1:
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 5:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0)
getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0xa0d52000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ff5000/0x1000)=nil, 0x1000})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x8030)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000e, 0x8010, r0, 0xbb48b000)
connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @any, 0x1}, 0xfffffffffffffcf2)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async)
getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0xa0d52000) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ff5000/0x1000)=nil, 0x1000}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0) (async)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x8030) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000e, 0x8010, r0, 0xbb48b000) (async)
connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @any, 0x1}, 0xfffffffffffffcf2) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async)

11:10:56 executing program 3:
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 1:
pipe2$9p(0x0, 0x0)

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x507240)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e, 0x0, <r2=>0x0})
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:56 executing program 3:
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 5:
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil}) (async)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0x0) (async)
getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x100010, r0, 0xa0d52000) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r1, 0x0, 0x0) (async)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ff5000/0x1000)=nil, 0x1000}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3817f7f08fa8c09b89bd70009ffe74626ce03245000000000000000000000000000004d20200320008001d00ff030000520001007368613235362d617678320000000000000000000000000000000000000000000000006d0000000000000000000000000000000050000000a072706fbd2cdc088f49000008001e00400000008001110000000000000000000000000000000001ff0100000000000000000000000000016401010000000000000000000000000064010102000000000000000000000000330200000235000002000a00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000ff02000000000000000000002e1800016c0400000735000002000a0064010101000000000000000000000000fc00000000000000000000000000000000000000000000000000ffffac141417fc0100000000000000000000000000002b030000ff34000008000200fc020000000000000000000000000001e000000100000000000000000000000000000000000001fc00000000000000000600000000000000010000003500000a00020000000000000000000000000000000001ac14141800000000ba00000000000000e0000001000000000000000000000000e0000002000000000000000000000000ff030000ffb74c1b0e2eed4c4b0013000a01010200000000000500000000000000010000000000000000000000000001000000000a000000b482e342bc25a4431c00d5dbd3c19125395334ec308df9d247f1f3acd7bb82e42ae45e8f51b4195275f0e454f1490fc67f7651979720173d74b042a7fb90b5b5875bc23fb24322b858b28ccfce0934a605455c4527f10691403648d03f09c4b4be3948e19063b032b07082670bc8ee5e34272b6b205cf02805b7e72c1e5cbd151b0ba2420fe01760d5daa94d2c2b6ef8cde169b622ca4cd5ee554cc493c21a0e5d417045a2e056543f1ef33f79565f57785b5df42696908fff2f93cde0aa510240b9ea05f88540f8a64fb1df58a53a7399f7b43ad8525294ed699028b39226a0f8c4c9e1849d9c310000000000000000b9e4803331d588edc63640e32b3d78dda2fb750372833ac5ecde62ea07733dec21e1a97c0522e83689f7b6fae3d567c9cb210585241f6b43675c4228256615523ea232d65c7ee3e7f75e08e86a05fc8e92f191ca93b534cbdb1ef103b5e9246b1ab84fe0575b9880c8a360e4fc11a03256b20687f89f997edeaf0946fe7cab758d247d5c48c3308a507344f911841486e6b3d56e56d88f1b72e4963f1f66ed78b40de67dafcb7bc0c66f72f0fd6fc349f989a2d1c48dc16a10b74b8512764929195b36b7f04c"], 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x8030) (async)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000e, 0x8010, r0, 0xbb48b000) (async)
connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @any, 0x1}, 0xfffffffffffffcf2) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000540)={r4}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

11:10:56 executing program 4:
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2})
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 3:
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 1:
pipe2$9p(0x0, 0x0)

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 4:
pipe2$9p(&(0x7f0000000140), 0x0)

11:10:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x507240)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e, 0x0, <r2=>0x0})
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x507240) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e}) (async)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)

11:10:56 executing program 5:
syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x111002)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:56 executing program 1:
pipe2$9p(0x0, 0x0)

11:10:56 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:56 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:56 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x507240)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e, 0x0, <r2=>0x0})
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x507240) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x1e}) (async)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2}) (async)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 5:
syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x111002)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})
syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x111002) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2}) (async)

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000fed000/0x12000)=nil})
syz_open_dev$rtc(&(0x7f0000000000), 0x40, 0xc000)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 5:
syz_open_dev$vivid(&(0x7f0000000140), 0x1, 0x2)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x111002) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r2})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000fed000/0x12000)=nil})
syz_open_dev$rtc(&(0x7f0000000000), 0x40, 0xc000)

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 1:
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000fed000/0x12000)=nil}) (async)
syz_open_dev$rtc(&(0x7f0000000000), 0x40, 0xc000)

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
socket$packet(0x11, 0x3, 0x300) (async)

11:10:57 executing program 1:
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 0:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x8, 0x4, 0x80, 0x32, 0xc8, 0x800}, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
pipe2$9p(0x0, 0x0)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 0:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x8, 0x4, 0x80, 0x32, 0xc8, 0x800}, 0xc) (async)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 1:
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 0:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x8, 0x4, 0x80, 0x32, 0xc8, 0x800}, 0xc) (async)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0xa33b, 0x40000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcupdate', 0x0, 0x4b)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040))

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r6})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0xa33b, 0x40000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcupdate', 0x0, 0x4b) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0) (async)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040))

11:10:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5397a743"}, 0x0, 0x4, {}, 0x6})

11:10:57 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async, rerun: 64)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r6})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0xa33b, 0x40000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcupdate', 0x0, 0x4b)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040))

11:10:57 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5397a743"}})

11:10:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r0 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000})

11:10:57 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0xa33b, 0x40000020, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcupdate', 0x0, 0x4b)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_apple', 0x301a80, 0x0)
write$P9_RGETLOCK(r2, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040))

11:10:57 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 4:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r6})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000002c0)={r4}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000040)={r6}) (async)

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x2000) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)

11:10:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 4:
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)

11:10:57 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x8, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)

11:10:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x2000)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:57 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2})
socket$packet(0x11, 0x3, 0x300)

11:10:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_corsair', 0x2002, 0x23)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)

11:10:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:58 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_corsair', 0x2002, 0x23)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})

11:10:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_corsair', 0x2002, 0x23)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil})
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_corsair', 0x2002, 0x23) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async)
userfaultfd(0x0) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r3}) (async)

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0)

11:10:58 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd2, 0x32b01)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1000005, 0x404, 0x8, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd2, 0x32b01)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1000005, 0x404, 0x8, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x2, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:58 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4, 0x3, 0x1, 0x80000001, 0x4, 0x5, 0x6}, 0x1c)

11:10:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

11:10:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd2, 0x32b01)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1000005, 0x404, 0x8, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r2})

11:10:58 executing program 4:
socket$packet(0x11, 0x0, 0x300)

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x2, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

11:10:58 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x100)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x3f, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

11:10:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4, 0x3, 0x1, 0x80000001, 0x4, 0x5, 0x6}, 0x1c)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000540)={r1}) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x4, 0x3, 0x1, 0x80000001, 0x4, 0x5, 0x6}, 0x1c) (async)

11:10:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf4, 0x400, 0x20})

11:10:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0xc88f)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

11:10:58 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000000})

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x100)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x40)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))

11:10:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x6, 0x3f, 0x1f, "5397a743"}, 0x5, 0x4, {}, 0x6})

[  159.144622] ==================================================================
[  159.152131] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210
[  159.159135] Read of size 8 at addr ffff8880b0291900 by task syz-executor.5/25486
[  159.166655] 
[  159.168283] CPU: 0 PID: 25486 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0
[  159.176152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  159.185495] Call Trace:
[  159.188078]  dump_stack+0x1b2/0x281
[  159.191699]  print_address_description.cold+0x54/0x1d3
[  159.196974]  kasan_report_error.cold+0x8a/0x191
[  159.201635]  ? vgem_gem_dumb_create+0x200/0x210
[  159.206293]  __asan_report_load8_noabort+0x68/0x70
[  159.211216]  ? vgem_gem_dumb_create+0x200/0x210
[  159.215885]  vgem_gem_dumb_create+0x200/0x210
[  159.220464]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[  159.225474]  ? __drm_printfn_debug+0x70/0x70
[  159.229876]  drm_ioctl_kernel+0x14c/0x200
[  159.234018]  drm_ioctl+0x42e/0x890
[  159.237555]  ? __drm_printfn_debug+0x70/0x70
[  159.241959]  ? drm_getstats+0x20/0x20
[  159.245760]  ? trace_hardirqs_on+0x10/0x10
[  159.249994]  ? drm_getstats+0x20/0x20
[  159.253785]  do_vfs_ioctl+0x75a/0xff0
[  159.257579]  ? lock_acquire+0x170/0x3f0
[  159.261541]  ? ioctl_preallocate+0x1a0/0x1a0
[  159.265942]  ? __fget+0x265/0x3e0
[  159.269385]  ? do_vfs_ioctl+0xff0/0xff0
[  159.273362]  ? security_file_ioctl+0x83/0xb0
[  159.277762]  SyS_ioctl+0x7f/0xb0
[  159.281122]  ? do_vfs_ioctl+0xff0/0xff0
[  159.285092]  do_syscall_64+0x1d5/0x640
[  159.288974]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x100)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x400, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

[  159.294154] RIP: 0033:0x7feef6a11049
[  159.297862] RSP: 002b:00007feef5344168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.305563] RAX: ffffffffffffffda RBX: 00007feef6b24100 RCX: 00007feef6a11049
[  159.312823] RDX: 0000000020000280 RSI: 00000000c02064b2 RDI: 0000000000000003
[  159.320086] RBP: 00007feef6a6b08d R08: 0000000000000000 R09: 0000000000000000
[  159.327347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.334602] R13: 00007ffdb1ef8a2f R14: 00007feef5344300 R15: 0000000000022000
[  159.341874] 
11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

[  159.343489] Allocated by task 25486:
[  159.347196]  kasan_kmalloc+0xeb/0x160
[  159.350993]  kmem_cache_alloc_trace+0x131/0x3d0
[  159.355656]  __vgem_gem_create+0x44/0xe0
[  159.359711]  vgem_gem_dumb_create+0xc5/0x210
[  159.364109]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[  159.369117]  drm_ioctl_kernel+0x14c/0x200
[  159.373254]  drm_ioctl+0x42e/0x890
[  159.376796]  do_vfs_ioctl+0x75a/0xff0
[  159.380587]  SyS_ioctl+0x7f/0xb0
[  159.383944]  do_syscall_64+0x1d5/0x640
[  159.387824]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  159.392999] 
11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xf4, 0x3, 0x20}) (async)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) (async)

[  159.394613] Freed by task 25486:
[  159.397970]  kasan_slab_free+0xc3/0x1a0
[  159.401935]  kfree+0xc9/0x250
[  159.405031]  drm_gem_object_free+0x8f/0x150
[  159.409343]  drm_gem_object_put_unlocked+0xc3/0x160
[  159.414349]  vgem_gem_dumb_create+0xf2/0x210
[  159.418747]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[  159.424024]  drm_ioctl_kernel+0x14c/0x200
[  159.428157]  drm_ioctl+0x42e/0x890
[  159.431688]  do_vfs_ioctl+0x75a/0xff0
[  159.435482]  SyS_ioctl+0x7f/0xb0
[  159.438839]  do_syscall_64+0x1d5/0x640
11:10:58 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffff9, 0x8, 0x20, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1})

[  159.442717]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  159.447889] 
[  159.449506] The buggy address belongs to the object at ffff8880b0291800
[  159.449506]  which belongs to the cache kmalloc-512 of size 512
[  159.462154] The buggy address is located 256 bytes inside of
[  159.462154]  512-byte region [ffff8880b0291800, ffff8880b0291a00)
[  159.474014] The buggy address belongs to the page:
[  159.478933] page:ffffea0002c0a440 count:1 mapcount:0 mapping:ffff8880b0291080 index:0xffff8880b0291d00
[  159.488369] flags: 0xfff00000000100(slab)
[  159.492509] raw: 00fff00000000100 ffff8880b0291080 ffff8880b0291d00 0000000100000004
[  159.500377] raw: ffffea0002a4fc20 ffffea00027b21e0 ffff88813fe74940 0000000000000000
[  159.508244] page dumped because: kasan: bad access detected
[  159.513939] 
[  159.515546] Memory state around the buggy address:
[  159.520449]  ffff8880b0291800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.527783]  ffff8880b0291880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.535113] >ffff8880b0291900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.542452]                    ^
[  159.545790]  ffff8880b0291980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.553123]  ffff8880b0291a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  159.560450] ==================================================================
[  159.567779] Disabling lock debugging due to kernel taint
[  159.587908] Kernel panic - not syncing: panic_on_warn set ...
[  159.587908] 
[  159.595279] CPU: 0 PID: 25486 Comm: syz-executor.5 Tainted: G    B           4.14.275-syzkaller #0
[  159.604357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  159.613693] Call Trace:
[  159.616269]  dump_stack+0x1b2/0x281
[  159.619886]  panic+0x1f9/0x42d
[  159.623088]  ? add_taint.cold+0x16/0x16
[  159.627054]  ? ___preempt_schedule+0x16/0x18
[  159.631540]  kasan_end_report+0x43/0x49
[  159.635502]  kasan_report_error.cold+0xa7/0x191
[  159.640160]  ? vgem_gem_dumb_create+0x200/0x210
[  159.644818]  __asan_report_load8_noabort+0x68/0x70
[  159.649736]  ? vgem_gem_dumb_create+0x200/0x210
[  159.654396]  vgem_gem_dumb_create+0x200/0x210
[  159.658881]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[  159.663888]  ? __drm_printfn_debug+0x70/0x70
[  159.668284]  drm_ioctl_kernel+0x14c/0x200
[  159.672418]  drm_ioctl+0x42e/0x890
[  159.675933]  ? __drm_printfn_debug+0x70/0x70
[  159.680321]  ? drm_getstats+0x20/0x20
[  159.684107]  ? trace_hardirqs_on+0x10/0x10
[  159.688321]  ? drm_getstats+0x20/0x20
[  159.692095]  do_vfs_ioctl+0x75a/0xff0
[  159.695871]  ? lock_acquire+0x170/0x3f0
[  159.699829]  ? ioctl_preallocate+0x1a0/0x1a0
[  159.704219]  ? __fget+0x265/0x3e0
[  159.707663]  ? do_vfs_ioctl+0xff0/0xff0
[  159.711613]  ? security_file_ioctl+0x83/0xb0
[  159.716002]  SyS_ioctl+0x7f/0xb0
[  159.719345]  ? do_vfs_ioctl+0xff0/0xff0
[  159.723338]  do_syscall_64+0x1d5/0x640
[  159.727207]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  159.732370] RIP: 0033:0x7feef6a11049
[  159.736056] RSP: 002b:00007feef5344168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.743740] RAX: ffffffffffffffda RBX: 00007feef6b24100 RCX: 00007feef6a11049
[  159.751001] RDX: 0000000020000280 RSI: 00000000c02064b2 RDI: 0000000000000003
[  159.758246] RBP: 00007feef6a6b08d R08: 0000000000000000 R09: 0000000000000000
[  159.765491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.772736] R13: 00007ffdb1ef8a2f R14: 00007feef5344300 R15: 0000000000022000
[  159.780212] Kernel Offset: disabled
[  159.783820] Rebooting in 86400 seconds..