85203, &(0x7f00000000c0)={0x8, 0x8a, "d9d6339ac9f9ae58e7a4064bd956be33181c28cff3121887f7334956df539b564ed63e2ea4649ea7ecdc15cf1a7dbb7a9e537fa4abab1e22c9d6782d95260b8ddf9d293334caee47ea1f0fe3b3d24181a0abefcdb01ad7f8b81655efcbf8e557c5856a051ed2bf8db235bf8b46b97d25d9cfca32c8f646ae2f0928dfe8b7300d9b61a85e91ef1cf869b1"}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 20:45:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) 20:45:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x400005, 0x1001}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x1, 0x7, 0x80000001, 0x100}}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2], 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:58 executing program 3: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8000, 0x14080) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x200) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x4e204481ce66431}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) 20:45:58 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 20:45:58 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x8, 0x8a, "d9d6339ac9f9ae58e7a4064bd956be33181c28cff3121887f7334956df539b564ed63e2ea4649ea7ecdc15cf1a7dbb7a9e537fa4abab1e22c9d6782d95260b8ddf9d293334caee47ea1f0fe3b3d24181a0abefcdb01ad7f8b81655efcbf8e557c5856a051ed2bf8db235bf8b46b97d25d9cfca32c8f646ae2f0928dfe8b7300d9b61a85e91ef1cf869b1"}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x8, 0x8a, "d9d6339ac9f9ae58e7a4064bd956be33181c28cff3121887f7334956df539b564ed63e2ea4649ea7ecdc15cf1a7dbb7a9e537fa4abab1e22c9d6782d95260b8ddf9d293334caee47ea1f0fe3b3d24181a0abefcdb01ad7f8b81655efcbf8e557c5856a051ed2bf8db235bf8b46b97d25d9cfca32c8f646ae2f0928dfe8b7300d9b61a85e91ef1cf869b1"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) 20:45:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f00, 0x2, &(0x7f0000000040)="c810"}) 20:45:58 executing program 1: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4121c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x10000006, 0x1ff, 0x4, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:45:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) 20:45:58 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f000000, 0x2, &(0x7f0000000040)="c810"}) 20:45:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x400005, 0x1001}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x1, 0x7, 0x80000001, 0x100}}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2], 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x400005, 0x1001}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x1, 0x7, 0x80000001, 0x100}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2], 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:45:58 executing program 1: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4121c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x10000006, 0x1ff, 0x4, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4121c0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x10000006, 0x1ff, 0x4}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:45:58 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x8, 0x8a, "d9d6339ac9f9ae58e7a4064bd956be33181c28cff3121887f7334956df539b564ed63e2ea4649ea7ecdc15cf1a7dbb7a9e537fa4abab1e22c9d6782d95260b8ddf9d293334caee47ea1f0fe3b3d24181a0abefcdb01ad7f8b81655efcbf8e557c5856a051ed2bf8db235bf8b46b97d25d9cfca32c8f646ae2f0928dfe8b7300d9b61a85e91ef1cf869b1"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) 20:45:59 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0xfdfdffff, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)={0x7, 0xc, [0x0, 0x0, 0x3f]}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:45:59 executing program 1: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4121c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x10000006, 0x1ff, 0x4, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:45:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0xfffffdfd, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async, rerun: 64) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (rerun: 64) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x400005, 0x1001}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x10001, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x1, 0x7, 0x80000001, 0x100}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2], 0x1}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:59 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c823"}) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x1251c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000040)={r1}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) r4 = syz_open_dev$dri(&(0x7f0000000100), 0xbea1, 0x410000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7, 0x80000001}) write$eventfd(r3, &(0x7f00000000c0)=0x9, 0x8) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)={0x7, 0xc, [0x0, 0x0, 0x3f]}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)={0x7, 0xc, [0x0, 0x0, 0x3f]}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:45:59 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x1251c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000040)={r1}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) r4 = syz_open_dev$dri(&(0x7f0000000100), 0xbea1, 0x410000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7, 0x80000001}) write$eventfd(r3, &(0x7f00000000c0)=0x9, 0x8) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000040)={r1}) (async) eventfd(0x0) (async) write$eventfd(r3, &(0x7f0000000080), 0x8) (async) syz_open_dev$dri(&(0x7f0000000100), 0xbea1, 0x410000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7, 0x80000001}) (async) write$eventfd(r3, &(0x7f00000000c0)=0x9, 0x8) (async) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)={0x7, 0xc, [0x0, 0x0, 0x3f]}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:59 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x1251c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:45:59 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000040)={r1}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) (async) r4 = syz_open_dev$dri(&(0x7f0000000100), 0xbea1, 0x410000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7, 0x80000001}) (async) write$eventfd(r3, &(0x7f00000000c0)=0x9, 0x8) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = geteuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000020c0)={0x3d0, 0x0, r3, [{{0x3, 0x2, 0xfffffffffffff9f6, 0x0, 0x2, 0x7, {0x3, 0x7f, 0x2, 0x0, 0x0, 0x6, 0x8, 0x0, 0x8, 0x2000, 0x8a, 0xee01, 0xee00, 0x8001, 0x6}}, {0x3, 0xfffffffffffffffa, 0x1, 0x6, ')'}}, {{0x4, 0x1, 0x6, 0x7b, 0x5, 0xcf35, {0x1, 0x200, 0x0, 0x5, 0x81, 0x1, 0x10000, 0x8, 0x7, 0x2000, 0xfffffffa, r5, 0xee01, 0x7000000, 0x3}}, {0x2, 0x8000000000000000, 0x6, 0x80, '\'{I.,!'}}, {{0x6, 0x2, 0x9, 0xffffffffffffffff, 0x8000, 0x10000, {0x3, 0x1e, 0x3, 0x3, 0x7, 0x286d, 0x5, 0x7, 0x1, 0x0, 0x56, r6, 0x0, 0x4ad2, 0x7f}}, {0x9, 0x16e68813, 0xc, 0x7ff, '/dev/random\x00'}}, {{0x4, 0x3, 0x8, 0x1, 0x81, 0x9, {0x0, 0x6, 0x80000000, 0x6, 0x4, 0xbe, 0xc1, 0x8, 0x3ff, 0x2000, 0x7, 0xee00, 0xee00, 0x10000, 0x1}}, {0x4, 0x34, 0x0, 0x7fffffff}}, {{0x5, 0x0, 0x7f, 0x5c, 0xf2a, 0x1000, {0x0, 0xffb2, 0x7fffffff, 0x106, 0x31, 0x4c, 0xfffffff9, 0x5, 0x5, 0x4000, 0x9, 0xee00, 0xffffffffffffffff, 0x1ff, 0xffff8001}}, {0x6, 0x7, 0x0, 0x7}}, {{0x3, 0x0, 0x6, 0x3, 0x4, 0x8001, {0x1, 0x8000000000000001, 0x8, 0x0, 0xffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x80, 0x2}}, {0x1, 0x80000001, 0xc, 0x1, '/dev/random\x00'}}]}, 0x3d0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000002600)={0x2b, 0x6, 0x0, {0x0, 0x1, 0x2, 0x0, '^)'}}, 0x2b) write$FUSE_DIRENT(r7, &(0x7f0000002500)={0xd0, 0x0, r4, [{0x0, 0x401, 0x1, 0xffffffe1, ')'}, {0x0, 0x7, 0x1, 0x7, ')'}, {0x4, 0x4, 0x6, 0x7, '\'{I.,!'}, {0x0, 0x2, 0x6, 0x8, '\'{I.,!'}, {0x6, 0x80000000, 0x2, 0x5, '{['}, {0x6, 0xfffffffffffffffa, 0x2, 0x40, '^)'}]}, 0xd0) 20:45:59 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0xc6], 0x1, 0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) r5 = geteuid() write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, r4, {0x100000000, 0x91b, 0x0, {0x5, 0x10001, 0xb86, 0x1b9562d7, 0xffffffffffff7fff, 0x8000, 0x1, 0xffffffff, 0x6, 0x2000, 0xfffff000, r5, 0xee01, 0x8, 0x4}}}, 0x78) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = geteuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000020c0)={0x3d0, 0x0, r3, [{{0x3, 0x2, 0xfffffffffffff9f6, 0x0, 0x2, 0x7, {0x3, 0x7f, 0x2, 0x0, 0x0, 0x6, 0x8, 0x0, 0x8, 0x2000, 0x8a, 0xee01, 0xee00, 0x8001, 0x6}}, {0x3, 0xfffffffffffffffa, 0x1, 0x6, ')'}}, {{0x4, 0x1, 0x6, 0x7b, 0x5, 0xcf35, {0x1, 0x200, 0x0, 0x5, 0x81, 0x1, 0x10000, 0x8, 0x7, 0x2000, 0xfffffffa, r5, 0xee01, 0x7000000, 0x3}}, {0x2, 0x8000000000000000, 0x6, 0x80, '\'{I.,!'}}, {{0x6, 0x2, 0x9, 0xffffffffffffffff, 0x8000, 0x10000, {0x3, 0x1e, 0x3, 0x3, 0x7, 0x286d, 0x5, 0x7, 0x1, 0x0, 0x56, r6, 0x0, 0x4ad2, 0x7f}}, {0x9, 0x16e68813, 0xc, 0x7ff, '/dev/random\x00'}}, {{0x4, 0x3, 0x8, 0x1, 0x81, 0x9, {0x0, 0x6, 0x80000000, 0x6, 0x4, 0xbe, 0xc1, 0x8, 0x3ff, 0x2000, 0x7, 0xee00, 0xee00, 0x10000, 0x1}}, {0x4, 0x34, 0x0, 0x7fffffff}}, {{0x5, 0x0, 0x7f, 0x5c, 0xf2a, 0x1000, {0x0, 0xffb2, 0x7fffffff, 0x106, 0x31, 0x4c, 0xfffffff9, 0x5, 0x5, 0x4000, 0x9, 0xee00, 0xffffffffffffffff, 0x1ff, 0xffff8001}}, {0x6, 0x7, 0x0, 0x7}}, {{0x3, 0x0, 0x6, 0x3, 0x4, 0x8001, {0x1, 0x8000000000000001, 0x8, 0x0, 0xffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x80, 0x2}}, {0x1, 0x80000001, 0xc, 0x1, '/dev/random\x00'}}]}, 0x3d0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000002600)={0x2b, 0x6, 0x0, {0x0, 0x1, 0x2, 0x0, '^)'}}, 0x2b) (async) write$FUSE_DIRENT(r7, &(0x7f0000002500)={0xd0, 0x0, r4, [{0x0, 0x401, 0x1, 0xffffffe1, ')'}, {0x0, 0x7, 0x1, 0x7, ')'}, {0x4, 0x4, 0x6, 0x7, '\'{I.,!'}, {0x0, 0x2, 0x6, 0x8, '\'{I.,!'}, {0x6, 0x80000000, 0x2, 0x5, '{['}, {0x6, 0xfffffffffffffffa, 0x2, 0x40, '^)'}]}, 0xd0) 20:45:59 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @generic={0x1, 0x7, 0xf, 0xe88, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x9}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x40, 0x3a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1]}, 0x80) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:59 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f00000000c0)={r1}) 20:45:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, 0x0) 20:45:59 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @generic={0x1, 0x7, 0xf, 0xe88, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x9}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x40, 0x3a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1]}, 0x80) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0xc6], 0x1, 0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) r5 = geteuid() write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, r4, {0x100000000, 0x91b, 0x0, {0x5, 0x10001, 0xb86, 0x1b9562d7, 0xffffffffffff7fff, 0x8000, 0x1, 0xffffffff, 0x6, 0x2000, 0xfffff000, r5, 0xee01, 0x8, 0x4}}}, 0x78) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0xc6], 0x1, 0x1}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) (async) geteuid() (async) write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, r4, {0x100000000, 0x91b, 0x0, {0x5, 0x10001, 0xb86, 0x1b9562d7, 0xffffffffffff7fff, 0x8000, 0x1, 0xffffffff, 0x6, 0x2000, 0xfffff000, r5, 0xee01, 0x8, 0x4}}}, 0x78) (async) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = geteuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000020c0)={0x3d0, 0x0, r3, [{{0x3, 0x2, 0xfffffffffffff9f6, 0x0, 0x2, 0x7, {0x3, 0x7f, 0x2, 0x0, 0x0, 0x6, 0x8, 0x0, 0x8, 0x2000, 0x8a, 0xee01, 0xee00, 0x8001, 0x6}}, {0x3, 0xfffffffffffffffa, 0x1, 0x6, ')'}}, {{0x4, 0x1, 0x6, 0x7b, 0x5, 0xcf35, {0x1, 0x200, 0x0, 0x5, 0x81, 0x1, 0x10000, 0x8, 0x7, 0x2000, 0xfffffffa, r5, 0xee01, 0x7000000, 0x3}}, {0x2, 0x8000000000000000, 0x6, 0x80, '\'{I.,!'}}, {{0x6, 0x2, 0x9, 0xffffffffffffffff, 0x8000, 0x10000, {0x3, 0x1e, 0x3, 0x3, 0x7, 0x286d, 0x5, 0x7, 0x1, 0x0, 0x56, r6, 0x0, 0x4ad2, 0x7f}}, {0x9, 0x16e68813, 0xc, 0x7ff, '/dev/random\x00'}}, {{0x4, 0x3, 0x8, 0x1, 0x81, 0x9, {0x0, 0x6, 0x80000000, 0x6, 0x4, 0xbe, 0xc1, 0x8, 0x3ff, 0x2000, 0x7, 0xee00, 0xee00, 0x10000, 0x1}}, {0x4, 0x34, 0x0, 0x7fffffff}}, {{0x5, 0x0, 0x7f, 0x5c, 0xf2a, 0x1000, {0x0, 0xffb2, 0x7fffffff, 0x106, 0x31, 0x4c, 0xfffffff9, 0x5, 0x5, 0x4000, 0x9, 0xee00, 0xffffffffffffffff, 0x1ff, 0xffff8001}}, {0x6, 0x7, 0x0, 0x7}}, {{0x3, 0x0, 0x6, 0x3, 0x4, 0x8001, {0x1, 0x8000000000000001, 0x8, 0x0, 0xffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x80, 0x2}}, {0x1, 0x80000001, 0xc, 0x1, '/dev/random\x00'}}]}, 0x3d0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000002600)={0x2b, 0x6, 0x0, {0x0, 0x1, 0x2, 0x0, '^)'}}, 0x2b) write$FUSE_DIRENT(r7, &(0x7f0000002500)={0xd0, 0x0, r4, [{0x0, 0x401, 0x1, 0xffffffe1, ')'}, {0x0, 0x7, 0x1, 0x7, ')'}, {0x4, 0x4, 0x6, 0x7, '\'{I.,!'}, {0x0, 0x2, 0x6, 0x8, '\'{I.,!'}, {0x6, 0x80000000, 0x2, 0x5, '{['}, {0x6, 0xfffffffffffffffa, 0x2, 0x40, '^)'}]}, 0xd0) 20:45:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000000000000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:45:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, 0x0) 20:45:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f00000000c0)={r1}) (async) 20:45:59 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @generic={0x1, 0x7, 0xf, 0xe88, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x9}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x40, 0x3a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1]}, 0x80) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @generic={0x1, 0x7, 0xf, 0xe88, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x9}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x40, 0x3a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1]}, 0x80) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:45:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0xc6], 0x1, 0x1}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) r5 = geteuid() write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, r4, {0x100000000, 0x91b, 0x0, {0x5, 0x10001, 0xb86, 0x1b9562d7, 0xffffffffffff7fff, 0x8000, 0x1, 0xffffffff, 0x6, 0x2000, 0xfffff000, r5, 0xee01, 0x8, 0x4}}}, 0x78) 20:45:59 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x7) 20:46:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, 0x0) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x420100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8000000000000001, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x7) 20:46:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f00000000c0)={r1}) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000000000000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0x0, 0x0}) [ 1301.389621] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.395283] ieee802154 phy1 wpan1: encryption failed: -22 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x420100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8000000000000001, 0x6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (rerun: 64) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000000000000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x420100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8000000000000001, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x7) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x7) (async) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x420100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8000000000000001, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x420100) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x8000000000000001, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x40, 0x85, 0x3ff}) 20:46:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="e2a372f1337ff930b3f683a18210fd4834bdad9e307738d4e41bc7231cb397cfe94d0efd7466a8415813aaea601b9afca53db6d315e6abc015495471b13d269e0548de27f556f55d6b7cdc3ac5e8b032465be2acf7e182b7a2fc31a7000ce3e5b113ee95a178be188a722dcc98b56e06cfb96aa1b50c379186c55cf9e6f8d06542cad57cfed3b481fe49eb2d5ab9bc20db1fe85dbf19c6", 0x97) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x1000, 0x2, 0x63cd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x3, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000300)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000180)=[r1, 0x0, r1, 0x0, r2], &(0x7f0000000180), 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000380)={&(0x7f0000000340)=[r5, r2, r6, r2, r2, r7, r2], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[r1, r2, r1, r2], 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4a2100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3f, 0x704}) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="e2a372f1337ff930b3f683a18210fd4834bdad9e307738d4e41bc7231cb397cfe94d0efd7466a8415813aaea601b9afca53db6d315e6abc015495471b13d269e0548de27f556f55d6b7cdc3ac5e8b032465be2acf7e182b7a2fc31a7000ce3e5b113ee95a178be188a722dcc98b56e06cfb96aa1b50c379186c55cf9e6f8d06542cad57cfed3b481fe49eb2d5ab9bc20db1fe85dbf19c6", 0x97) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x1000, 0x2, 0x63cd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x3, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000300)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="e2a372f1337ff930b3f683a18210fd4834bdad9e307738d4e41bc7231cb397cfe94d0efd7466a8415813aaea601b9afca53db6d315e6abc015495471b13d269e0548de27f556f55d6b7cdc3ac5e8b032465be2acf7e182b7a2fc31a7000ce3e5b113ee95a178be188a722dcc98b56e06cfb96aa1b50c379186c55cf9e6f8d06542cad57cfed3b481fe49eb2d5ab9bc20db1fe85dbf19c6", 0x97) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x1000, 0x2, 0x63cd}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x3, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000300)=0x6) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) (async) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) (async) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) (async) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) (async, rerun: 32) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x40, 0x85, 0x3ff}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x40, 0x85, 0x3ff}) (async) 20:46:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4a2100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3f, 0x704}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4a2100) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3f, 0x704}) (async) 20:46:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="e2a372f1337ff930b3f683a18210fd4834bdad9e307738d4e41bc7231cb397cfe94d0efd7466a8415813aaea601b9afca53db6d315e6abc015495471b13d269e0548de27f556f55d6b7cdc3ac5e8b032465be2acf7e182b7a2fc31a7000ce3e5b113ee95a178be188a722dcc98b56e06cfb96aa1b50c379186c55cf9e6f8d06542cad57cfed3b481fe49eb2d5ab9bc20db1fe85dbf19c6", 0x97) (async, rerun: 32) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x1000, 0x2, 0x63cd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000380)={r2}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x3, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000300)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) (async) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) (async, rerun: 64) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4a2100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3f, 0x704}) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x40, 0x85, 0x3ff}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x40, 0x85, 0x3ff}) (async) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 20:46:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000580)={r10}) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x7, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x32786d647cdf0daf) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x600001) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 20:46:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 20:46:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/4096) 20:46:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x50, 0x0, 0x2, 0x4, 0x9], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x7, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x32786d647cdf0daf) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x600001) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x32786d647cdf0daf) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x600001) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000540)) 20:46:01 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x50, 0x0, 0x2, 0x4, 0x9], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) r9 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, 0x0) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x50, 0x0, 0x2, 0x4, 0x9], 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x5, 0x3, 0x8, 0x220, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x7, 0xb2d3, 0x802, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x50000000, 0x91, &(0x7f0000000140)=""/145, 0x41000, 0xc, '\x00', 0x0, 0x72, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xb, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r3, 0x4) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r5 = socket(0x2c, 0x1, 0x7f) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7af}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x626d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xd82bfbfdc17a0543) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r9}) 20:46:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x7, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ff, 0x32786d647cdf0daf) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x600001) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 20:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/4096) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) 20:46:01 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe44, 0xac300) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x5, 0x3, 0x8, 0x220, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x7, 0xb2d3, 0x802, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x50000000, 0x91, &(0x7f0000000140)=""/145, 0x41000, 0xc, '\x00', 0x0, 0x72, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xb, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r3, 0x4) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r5 = socket(0x2c, 0x1, 0x7f) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7af}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x626d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xd82bfbfdc17a0543) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r9}) 20:46:01 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_dccp(0xa, 0x6, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, r2, {{0x4, 0x7ff, 0x0, 0xffffffffffffffff}}}, 0x28) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_BMAP(r3, &(0x7f0000002100)={0x18, 0x0, r2, {0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x1, 0x1}) 20:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/4096) 20:46:01 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000380)={0x40}) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe44, 0xac300) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x5, 0x3, 0x8, 0x220, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x7, 0xb2d3, 0x802, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x50000000, 0x91, &(0x7f0000000140)=""/145, 0x41000, 0xc, '\x00', 0x0, 0x72, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xb, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r3, 0x4) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r5 = socket(0x2c, 0x1, 0x7f) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7af}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x626d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xd82bfbfdc17a0543) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r9}) 20:46:01 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3}) 20:46:01 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_dccp(0xa, 0x6, 0x0) (async) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, r2, {{0x4, 0x7ff, 0x0, 0xffffffffffffffff}}}, 0x28) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000002100)={0x18, 0x0, r2, {0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x1, 0x1}) 20:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20002) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/247) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe44, 0xac300) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0xc2001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000480)=[r6, 0x0, r7, r5, r8, 0x0, r3], &(0x7f00000004c0)=[0x6], 0x7}) 20:46:01 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6_dccp(0xa, 0x6, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, r2, {{0x4, 0x7ff, 0x0, 0xffffffffffffffff}}}, 0x28) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_BMAP(r3, &(0x7f0000002100)={0x18, 0x0, r2, {0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x1, 0x1}) socket$inet6_dccp(0xa, 0x6, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, r2, {{0x4, 0x7ff, 0x0, 0xffffffffffffffff}}}, 0x28) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000002100)={0x18, 0x0, r2, {0x2}}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x1, 0x1}) (async) 20:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20002) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/247) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20002) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/247) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0xc2001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0xc2001) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) write$usbip_server(r0, &(0x7f0000000180)=@ret_submit={{0x3, 0x3, 0x0, 0x1, 0x80}, 0x0, 0x9e, 0x4, 0x162, 0x0, 0x0, "0c78b8ee70e933b2d0e210ab00279af6ae689c6c849d82985ce8730ae60a625209e056110ce9e68baf1d843aa2016bc6450b71e0829a89b4b6907a4ec7f78ba642ccbe1e02c824bfaa241c3cb133317e6a8242adf49a219e107bfb6d1aa1f2b1f0a25342922060ede8a21b600da55798d29ba0a3e91f4f4f29f979a510b26aab91472e4e14193b447ac726213c3624f29b43a8656785770c188aa2505dcf", [{0xf2, 0x1, 0x7fffffff, 0x7}, {0xef5, 0x4, 0x81, 0x6}, {0x8, 0x9, 0xc000000, 0x3f}, {0x1, 0x29f, 0x6, 0x3}, {0xeb3, 0x1, 0xffff, 0x89b}, {0x7, 0x3f, 0x2, 0x6}, {0x2, 0x1000, 0x4, 0x9}, {0xa9, 0x1, 0x2, 0x6}, {0x7f, 0x7, 0x3, 0x9}, {0x3, 0x8, 0x9, 0x4000400}, {0x3, 0x7fff, 0x1ff, 0x9}, {0x1, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xe4c, 0x80000001}, {0x80000000, 0xff, 0x1ff, 0x9}, {0x400, 0x522e, 0x4, 0x3}, {0x7, 0xffffffff, 0x4, 0x4}, {0x20, 0x8000, 0x401, 0x9}, {0x3f, 0x101, 0x205, 0x7fffffff}, {0xe9, 0x3ff, 0xfffffffe, 0xd9}, {0x2, 0x7, 0x1f, 0x6}, {0xffffffff, 0xff, 0x3, 0x1}, {0x80, 0x8a0, 0x5, 0x5}, {0x5, 0x9, 0x1, 0x8e6}, {0x100, 0x0, 0x0, 0x8}, {0x3, 0x9, 0x9, 0x80000001}, {0x9, 0x81, 0x9, 0x982a}, {0x7, 0x35685324, 0x7fffffff, 0x55d}, {0x1000, 0x2, 0x6, 0x6}, {0x7, 0x5, 0xdc, 0x4}, {0x80000001, 0x3, 0x2c34, 0x2}, {0x4, 0x7, 0x0, 0x17}, {0xffff7fff, 0x3, 0x8, 0x3}, {0x6, 0x3, 0x8, 0x100}, {0x2, 0xfffffffe, 0x9, 0x3}, {0xffff, 0x101, 0x1, 0x8}, {0x3d0c1da5, 0x6, 0x7fffffff, 0x4}, {0xb4d5, 0x0, 0xc5, 0x5}, {0x3f, 0x100, 0x0, 0x1ff}, {0x2, 0x7, 0xef83, 0x9}, {0x3f, 0x9, 0x49e, 0x9}, {0x400, 0xfffffffe, 0x4, 0x80000000}, {0x81, 0xb772, 0xffffffff, 0x8000}, {0x0, 0xffffffc0, 0x800, 0x179}, {0x0, 0x5, 0x7e9e, 0x9}, {0x9, 0x3, 0x7, 0x8000}, {0x9, 0x100, 0xffff0000, 0x19e}, {0x9, 0x9, 0x2, 0x6}, {0x7f, 0x2fe, 0x0, 0x3e}, {0x7, 0x800, 0x3, 0x4}, {0x7fffffff, 0x3, 0x401}, {0x8, 0x5, 0x2, 0x3e}, {0x1, 0x3, 0x7, 0x6}, {0x8, 0x8, 0xdd0, 0x9af}, {0x8000, 0x80000, 0x80000000, 0xfffffffd}, {0x7fff, 0xffff, 0x0, 0x734}, {0x10000, 0x6, 0x7f, 0x1ff}, {0x100, 0x100, 0x101, 0x6}, {0x813, 0x8, 0x5, 0x100}, {0x9, 0x4, 0x6e6, 0x3}, {0x7f, 0x9, 0x5, 0x4}, {0x7, 0x200, 0x7f, 0xae}, {0x0, 0x0, 0x8, 0x9}, {0xe1, 0x1, 0xfff, 0xeb}, {0x7f00000, 0x401, 0x7f, 0x7fff}, {0x4, 0x8000, 0x300, 0x8}, {0x2, 0x8d, 0x8, 0xc}, {0x85, 0x10000, 0x0, 0x7}, {0x2018fb8a, 0x9, 0x8, 0x6}, {0x4, 0x3, 0x7fffffff}, {0x8, 0x5, 0x8d, 0x20}, {0x4, 0x8, 0x7, 0x1}, {0x1f, 0x8, 0x2, 0x6}, {0x0, 0xfffff50a, 0x5, 0xfffffffc}, {0x7, 0x921, 0x2, 0x4f}, {0x80000001, 0x5, 0x4, 0xed1}, {0x5, 0x7, 0x81, 0x8000}, {0x2, 0x1, 0x7, 0xffff}, {0x19, 0x2, 0x1, 0x1}, {0x6, 0x12000, 0x80000000, 0x2}, {0x3ff, 0x81, 0x8001, 0xffffffff}, {0x8, 0x7f, 0x1, 0x2}, {0x7fffffff, 0xaa3, 0xff, 0x7c3f2f1a}, {0xfff, 0x3, 0x3, 0x982}, {0x1, 0x4, 0x2, 0x80}, {0x9, 0xfffff000, 0xffff, 0x80000001}, {0x95, 0x1, 0x3, 0x2}, {0xfffff000, 0x0, 0x2, 0x6}, {0x1f, 0x1, 0x97f5, 0x4}, {0x3f, 0x3f, 0x8000, 0x8}, {0x8, 0x3, 0x1b4e, 0x100}, {0x40, 0x9, 0x1, 0x2}, {0x1, 0x200, 0x80, 0x100}, {0x1, 0x7, 0x200, 0x5}, {0x4000, 0x9, 0x3, 0x1ff}, {0x400, 0x9, 0x80000001, 0x9}, {0x8}, {0x5, 0x80000001, 0x7, 0xffffffff}, {0x0, 0xc5e, 0x4, 0x4}, {0x75ae, 0x7, 0x7fffffff, 0x7ff}, {0x2, 0x3bc4, 0x5, 0x8}, {0x3, 0x1000, 0x7, 0x1}, {0x2, 0x5, 0x0, 0x8}, {0x401, 0x7, 0xc000, 0x10001}, {0x6, 0x3, 0x9}, {0xffffffff, 0x2, 0x10000, 0x7}, {0x2, 0x2, 0x1, 0xffff7f3b}, {0x200, 0x7, 0x9, 0x8000}, {0xb3, 0x5, 0x1, 0x7}, {0x8001, 0xad, 0x80000000, 0x9d2}, {0xfffff001, 0x2, 0x4, 0xb3df}, {0xf95, 0x1000, 0x9137, 0x5}, {0x36a9, 0x101, 0x8, 0x326}, {0x3f, 0x9, 0x0, 0xffff}, {0x4, 0x80000001, 0x4d730adb, 0x1}, {0x1, 0x2, 0x7, 0x7}, {0x8, 0x9, 0x0, 0xa2f}, {0x81, 0x0, 0x5, 0x200}, {0x7, 0x9, 0x8, 0xfff}, {0x7e00, 0x7, 0x0, 0x3ff}, {0x1, 0x0, 0x0, 0x400}, {0x8, 0xffffffff, 0x9, 0x2}, {0x80000001, 0x935, 0x62, 0x2000000}, {0xb7dd, 0x9, 0x0, 0xfffff800}, {0x81, 0x7fffffff, 0x4f, 0x7fffffff}, {0x7fffffff, 0x30f5f68b, 0x0, 0x98}, {0xcf, 0x1, 0xfffffffe, 0x1}, {0xb500, 0x4, 0x3, 0xfff}, {0x3ff, 0x8, 0x6}, {0x7, 0xfffffff9, 0x4, 0x8af}, {0x1, 0x80d, 0x401, 0x3}, {0x10001, 0x1, 0x800, 0x81}, {0x4, 0xd9, 0xffffffff, 0x661}, {0x1ff, 0xff, 0x1, 0x9d}, {0x5, 0x2, 0x7, 0x4}, {0x3, 0x9, 0x1, 0x7}, {0x0, 0x309, 0x4, 0x4}, {0x9, 0x8, 0x8, 0x1ff}, {0x2, 0x189000, 0x618abd60, 0x80000000}, {0x10001, 0x800, 0x9, 0x8}, {0xfffffff7, 0x3, 0x6}, {0x251a, 0x349f, 0x4, 0x7}, {0x8, 0x20, 0x1, 0x3f}, {0x80000001, 0x6, 0x80, 0x1}, {0x8000, 0x3, 0x59, 0xfffffffa}, {0x7, 0x9, 0xaf, 0x9}, {0x4, 0x200, 0x8, 0x8000}, {0x95c2, 0x4, 0x5bcd, 0x2}, {0x9, 0x9, 0x400, 0x6677}, {0x2, 0x8000, 0x7, 0x80}, {0x8, 0x1a, 0x6, 0x8}, {0x8000, 0x2, 0x2, 0x2}, {0x29, 0xffffffff, 0xfffffff7, 0x1}, {0x40, 0x4, 0x2, 0x81}, {0x6, 0x7f, 0x3b2, 0x5}, {0x8, 0x0, 0x4, 0x9}, {0x8, 0x20, 0x9, 0xff}, {0x9, 0x2, 0x0, 0x2}, {0x20, 0x8, 0x5, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x9, 0x1, 0x7, 0xfff}, {0x401, 0x8001, 0xfff, 0xffff}, {0xae, 0x4, 0x3, 0x800}, {0xff, 0x5, 0x4, 0x5}, {0x6, 0x4, 0x4, 0x3}, {0xfff, 0x1, 0x8, 0x9167}, {0x1ff, 0x10001, 0x3}, {0x4, 0x5, 0x8}, {0x4, 0x2, 0x0, 0x1}, {0xfb, 0xfffffffe, 0x1f, 0x800}, {0x1, 0x8, 0x3, 0xff}, {0x2, 0x8, 0x20, 0x5}, {0xfffffffc, 0x7, 0x6, 0x3d3e58ae}, {0x5, 0x5, 0x3ff}, {0xffffffe0, 0x5cb3735d, 0x9}, {0x678, 0xf67, 0x6, 0x9}, {0x5, 0x6c7, 0xf37, 0x10000}, {0x5, 0x1, 0x1, 0x8}, {0x7fff, 0x7, 0x1737, 0x8}, {0x0, 0x7ff, 0x8, 0x3}, {0x8001, 0x0, 0x2, 0x8001}, {0x8, 0x2, 0x1, 0x3ff}, {0x2e29, 0x6107, 0x4, 0x200}, {0xffffffff, 0xa2ed, 0x85, 0xfffff000}, {0xf2a6, 0x4, 0x8, 0x1f}, {0x7, 0x8001, 0x3ff, 0x3}, {0x8, 0x7fff, 0xf5c, 0x4}, {0x5, 0x7, 0xd41, 0x80}, {0x8, 0x7, 0x39, 0x7ff}, {0x2, 0x800, 0x800, 0x4}, {0x4, 0x800, 0x1, 0x56a}, {0x800, 0x7fffffff, 0x2, 0x1}, {0x8000, 0x80000000, 0x80000000, 0x3ff}, {0x80000000, 0x8f, 0x9c6, 0x4}, {0xd19a, 0x0, 0x8, 0x400000}, {0x8, 0x400, 0x1000, 0x3}, {0x0, 0xffff, 0x9}, {0xfff, 0x4, 0xfffffff7}, {0x0, 0x8, 0x7ff, 0x3}, {0x8, 0x73f, 0x0, 0x400}, {0x8, 0xde, 0xe6, 0x9}, {0x1, 0x100, 0x987a, 0x81}, {0xcb, 0xffff, 0x0, 0x5}, {0x4a, 0x0, 0xabe7, 0x6}, {0x6, 0x5, 0x800, 0xfffffffd}, {0x1, 0x80000001, 0xffff, 0x374}, {0x4, 0x7, 0x9, 0x4}, {0x7, 0x4, 0x0, 0xa3c8}, {0x5, 0x5, 0xd4, 0x7f}, {0xfffffff9, 0x5, 0x31, 0x3}, {0x3, 0x40, 0x0, 0x5}, {0xbb, 0x2, 0x1, 0x1}, {0x0, 0x100, 0x61, 0x20}, {0x7, 0x8001, 0x8, 0x1f}, {0x3ff, 0x3, 0x8, 0x100}, {0x2, 0x20, 0x9}, {0x6b, 0x1, 0x800, 0x2}, {0x0, 0x8}, {0x4, 0xffff0fc9, 0x7, 0x65}, {0x3ff, 0x800, 0xffffffc4, 0x3}, {0x1f, 0x7, 0x0, 0x4}, {0x9, 0x7fffffff, 0x9, 0xfffff001}, {0x0, 0x80000000, 0x800, 0x2}, {0x0, 0x6, 0x9, 0x9bb6}, {0x2, 0x32, 0x400}, {0xffffffff, 0x1, 0x3, 0x7}, {0x3, 0x3f, 0x7f, 0x63}, {0x3, 0x7fff, 0x338b4485, 0x303}, {0x4816, 0x3, 0x8, 0x39}, {0x2, 0x1, 0x2, 0x1}, {0x818c, 0xe1e, 0x65, 0x7}, {0x1000, 0x7dd, 0x9, 0x1800}, {0xff, 0x7, 0xc8, 0x5}, {0xffffffff, 0x4, 0x81, 0x64cd}, {0x1, 0x0, 0xd547, 0x9}, {0x1, 0xffff, 0xffffee5f, 0xab6}, {0x8001, 0x7ff, 0x3, 0x1ffc000}, {0x81, 0x4, 0x1, 0x3f}, {0x3, 0x8, 0x80000001, 0x80000}, {0x400, 0x4, 0x7fff, 0x7fff}, {0x400, 0x4, 0x2, 0x80000001}, {0x5, 0x80000001, 0x10000}, {0x5, 0xefc, 0x8000, 0x7}, {0x2, 0x852, 0x2, 0x7fff}, {0x4, 0x7ff, 0xd2, 0x9}, {0x7, 0x3e92, 0x80, 0x723}, {0x1, 0xff, 0x1, 0x8}, {0xed9, 0x7, 0x6625ee3b, 0x6}, {0x0, 0x0, 0x40, 0x81}, {0x20, 0x3f, 0x1f, 0x9}, {0x3, 0x6000000, 0x1, 0x7fff}, {0x3, 0x4, 0x6, 0x1}, {0x200, 0x83, 0x0, 0x6490800c}, {0x20, 0xbf, 0x79, 0x81}, {0x4d, 0x1f, 0x6, 0x7a9}, {0x1, 0x3ff, 0xffff, 0x7}, {0x6, 0x5}, {0x0, 0x101, 0x2, 0xfffff800}, {0x0, 0x7, 0x3, 0x5}, {0x200, 0x4, 0x0, 0x5}, {0x78, 0x8, 0x9, 0x2}, {0xbf, 0x1, 0x20, 0x2}, {0x7, 0x8000, 0x0, 0x1}, {0x3, 0x7fff, 0x0, 0x7fff}, {0x7f, 0xfffffffd, 0x7fff, 0x7}, {0x9a6b, 0x6, 0x3, 0x68800000}, {0xb, 0x3, 0x100, 0x7fffffff}, {0xfffffc01, 0x7ff}, {0x8, 0xa5, 0x12, 0x24}, {0x4, 0x81, 0x6, 0x1f6}, {0x6, 0x4, 0x8001, 0x4}, {0x4, 0x7, 0x2, 0x401}, {0xf29, 0xf258, 0x8, 0x7f}, {0x5, 0x6, 0x400, 0x40}, {0x1c27, 0x80000001, 0x5, 0x3}, {0x0, 0x9, 0x5, 0xfffffffe}, {0x4, 0x40, 0x9, 0x4}, {0x4, 0x4, 0x3, 0x20}, {0x5, 0x3, 0x163, 0x800}, {0x80, 0x2, 0x20, 0x4}, {0x10000, 0x400, 0x5, 0x4}, {0x80, 0x9, 0x7, 0x4}, {0x9, 0x3f57, 0x80000001, 0x8c2}, {0x6f71, 0x2, 0x1ff, 0x6}, {0x7, 0x101, 0x1, 0x3}, {0x4, 0x0, 0x1ff, 0x5}, {0x7ff, 0x7, 0x7, 0x200}, {0x0, 0x4, 0x5, 0x7}, {0x3e6, 0xe5, 0x5, 0x8}, {0x4, 0x200, 0x7, 0x9}, {0x200, 0x3, 0x576b, 0x8}, {0x1, 0xffff, 0x400, 0x3}, {0x10000, 0x6, 0x4, 0x55b8d705}, {0x8000, 0xf0000000, 0x3, 0x9}, {0x1, 0xffffffff, 0x7, 0x4}, {0xffffffff, 0x1c, 0x4b9, 0xae}, {0x0, 0x1, 0xb1, 0xffffff01}, {0x81, 0xbac0, 0x80000001, 0x8}, {0x4, 0x6, 0xb2e6}, {0x1, 0x6, 0x8001, 0x3ff}, {0x0, 0x800, 0x3ed, 0x3}, {0x9, 0x29f, 0x3f, 0xffff}, {0x1, 0xfbd, 0x7, 0x8}, {0x0, 0x35ec, 0x0, 0x1000}, {0x2c6, 0x3, 0x0, 0xdf}, {0x6ef7, 0x5, 0x20}, {0xefc1, 0x1, 0x8, 0x9}, {0x1, 0x4, 0xebba, 0xffff}, {0x101, 0xc2, 0x0, 0x7f}, {0x2, 0x4, 0x9, 0x2}, {0x1ff, 0xd3a, 0x2, 0x7}, {0x2, 0x2, 0x1ff, 0x80000000}, {0x3ff, 0x3ff, 0x10000, 0x7}, {0x5, 0x3ff, 0x7fffffff, 0x4}, {0x5, 0x1, 0x8, 0x8}, {0x3, 0x46ae, 0x2, 0x1}, {0x3, 0x0, 0x1f, 0x9}, {0x7, 0xfffffff7, 0xa45, 0xf2e}, {0x9, 0xfc0, 0x0, 0x1}, {0x28, 0x12, 0x80, 0x6}, {0x9, 0x572, 0x2, 0x2}, {0x80000001, 0x1, 0x5, 0x830}, {0x1ce, 0xffff8001, 0x80000001, 0x5}, {0x7fffffff, 0x4, 0x6, 0x10000}, {0x9, 0xaeaa, 0x9, 0x3}, {0x7, 0x80, 0x4}, {0x1, 0x100, 0x0, 0x10000}, {0x9, 0x5, 0x6, 0x401}, {0x3, 0x9, 0xdf4d, 0x55a8}, {0xfffffff8, 0xffffffff, 0x96, 0x4}, {0x8, 0x5, 0xfffffffc, 0x9}, {0xfffffcb9, 0x80, 0xfffffc01, 0xffff}, {0x8, 0x3, 0xffffffe1, 0xfffffffb}, {0x0, 0x2, 0x7, 0x100}, {0x0, 0x9, 0x3, 0x4a88}, {0x8, 0xff, 0x5, 0x5}, {0x1, 0x5, 0xef, 0x2}, {0x0, 0x5, 0x8001, 0x40}, {0x1385628e, 0x20, 0x8, 0x3}, {0x0, 0x1, 0x8001, 0x7ff}, {0x9, 0x8, 0x7ff, 0x9}, {0x6, 0xfffffff8, 0x7, 0xfffffc00}, {0x5, 0x38babec3, 0x4, 0x2}, {0x80000001, 0x94, 0x7ff, 0xa4c}, {0x1, 0x6, 0x400, 0x20}, {0x9, 0x8000, 0x7fffffff, 0x7}, {0x5, 0x7, 0xffffffff, 0x6}, {0x3, 0x6, 0x1000, 0x6}, {0x7e2, 0x4, 0x6, 0x8}, {0x800, 0x0, 0x10000, 0x9}, {0x9, 0x7ff, 0x2, 0x9}, {0x8, 0x10000, 0x80, 0x200}, {0x0, 0x80, 0x2, 0x4}, {0x7fff, 0x3, 0x1, 0x2}, {0x5, 0x810, 0xfffffffc, 0x81}]}, 0x16ee) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000440)) 20:46:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) r3 = geteuid() r4 = geteuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2200020, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c616c6c6faece01b06865722c7569643c", @ANYRESDEC=0xee01, @ANYBLOB=',func=FILE_CHECK,uid>', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC=r4, @ANYBLOB=',obj_user=/dev/dri/card#\x00,\x00']) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20002) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/247) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20002) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/247) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async, rerun: 32) write$usbip_server(r0, &(0x7f0000000180)=@ret_submit={{0x3, 0x3, 0x0, 0x1, 0x80}, 0x0, 0x9e, 0x4, 0x162, 0x0, 0x0, "0c78b8ee70e933b2d0e210ab00279af6ae689c6c849d82985ce8730ae60a625209e056110ce9e68baf1d843aa2016bc6450b71e0829a89b4b6907a4ec7f78ba642ccbe1e02c824bfaa241c3cb133317e6a8242adf49a219e107bfb6d1aa1f2b1f0a25342922060ede8a21b600da55798d29ba0a3e91f4f4f29f979a510b26aab91472e4e14193b447ac726213c3624f29b43a8656785770c188aa2505dcf", [{0xf2, 0x1, 0x7fffffff, 0x7}, {0xef5, 0x4, 0x81, 0x6}, {0x8, 0x9, 0xc000000, 0x3f}, {0x1, 0x29f, 0x6, 0x3}, {0xeb3, 0x1, 0xffff, 0x89b}, {0x7, 0x3f, 0x2, 0x6}, {0x2, 0x1000, 0x4, 0x9}, {0xa9, 0x1, 0x2, 0x6}, {0x7f, 0x7, 0x3, 0x9}, {0x3, 0x8, 0x9, 0x4000400}, {0x3, 0x7fff, 0x1ff, 0x9}, {0x1, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xe4c, 0x80000001}, {0x80000000, 0xff, 0x1ff, 0x9}, {0x400, 0x522e, 0x4, 0x3}, {0x7, 0xffffffff, 0x4, 0x4}, {0x20, 0x8000, 0x401, 0x9}, {0x3f, 0x101, 0x205, 0x7fffffff}, {0xe9, 0x3ff, 0xfffffffe, 0xd9}, {0x2, 0x7, 0x1f, 0x6}, {0xffffffff, 0xff, 0x3, 0x1}, {0x80, 0x8a0, 0x5, 0x5}, {0x5, 0x9, 0x1, 0x8e6}, {0x100, 0x0, 0x0, 0x8}, {0x3, 0x9, 0x9, 0x80000001}, {0x9, 0x81, 0x9, 0x982a}, {0x7, 0x35685324, 0x7fffffff, 0x55d}, {0x1000, 0x2, 0x6, 0x6}, {0x7, 0x5, 0xdc, 0x4}, {0x80000001, 0x3, 0x2c34, 0x2}, {0x4, 0x7, 0x0, 0x17}, {0xffff7fff, 0x3, 0x8, 0x3}, {0x6, 0x3, 0x8, 0x100}, {0x2, 0xfffffffe, 0x9, 0x3}, {0xffff, 0x101, 0x1, 0x8}, {0x3d0c1da5, 0x6, 0x7fffffff, 0x4}, {0xb4d5, 0x0, 0xc5, 0x5}, {0x3f, 0x100, 0x0, 0x1ff}, {0x2, 0x7, 0xef83, 0x9}, {0x3f, 0x9, 0x49e, 0x9}, {0x400, 0xfffffffe, 0x4, 0x80000000}, {0x81, 0xb772, 0xffffffff, 0x8000}, {0x0, 0xffffffc0, 0x800, 0x179}, {0x0, 0x5, 0x7e9e, 0x9}, {0x9, 0x3, 0x7, 0x8000}, {0x9, 0x100, 0xffff0000, 0x19e}, {0x9, 0x9, 0x2, 0x6}, {0x7f, 0x2fe, 0x0, 0x3e}, {0x7, 0x800, 0x3, 0x4}, {0x7fffffff, 0x3, 0x401}, {0x8, 0x5, 0x2, 0x3e}, {0x1, 0x3, 0x7, 0x6}, {0x8, 0x8, 0xdd0, 0x9af}, {0x8000, 0x80000, 0x80000000, 0xfffffffd}, {0x7fff, 0xffff, 0x0, 0x734}, {0x10000, 0x6, 0x7f, 0x1ff}, {0x100, 0x100, 0x101, 0x6}, {0x813, 0x8, 0x5, 0x100}, {0x9, 0x4, 0x6e6, 0x3}, {0x7f, 0x9, 0x5, 0x4}, {0x7, 0x200, 0x7f, 0xae}, {0x0, 0x0, 0x8, 0x9}, {0xe1, 0x1, 0xfff, 0xeb}, {0x7f00000, 0x401, 0x7f, 0x7fff}, {0x4, 0x8000, 0x300, 0x8}, {0x2, 0x8d, 0x8, 0xc}, {0x85, 0x10000, 0x0, 0x7}, {0x2018fb8a, 0x9, 0x8, 0x6}, {0x4, 0x3, 0x7fffffff}, {0x8, 0x5, 0x8d, 0x20}, {0x4, 0x8, 0x7, 0x1}, {0x1f, 0x8, 0x2, 0x6}, {0x0, 0xfffff50a, 0x5, 0xfffffffc}, {0x7, 0x921, 0x2, 0x4f}, {0x80000001, 0x5, 0x4, 0xed1}, {0x5, 0x7, 0x81, 0x8000}, {0x2, 0x1, 0x7, 0xffff}, {0x19, 0x2, 0x1, 0x1}, {0x6, 0x12000, 0x80000000, 0x2}, {0x3ff, 0x81, 0x8001, 0xffffffff}, {0x8, 0x7f, 0x1, 0x2}, {0x7fffffff, 0xaa3, 0xff, 0x7c3f2f1a}, {0xfff, 0x3, 0x3, 0x982}, {0x1, 0x4, 0x2, 0x80}, {0x9, 0xfffff000, 0xffff, 0x80000001}, {0x95, 0x1, 0x3, 0x2}, {0xfffff000, 0x0, 0x2, 0x6}, {0x1f, 0x1, 0x97f5, 0x4}, {0x3f, 0x3f, 0x8000, 0x8}, {0x8, 0x3, 0x1b4e, 0x100}, {0x40, 0x9, 0x1, 0x2}, {0x1, 0x200, 0x80, 0x100}, {0x1, 0x7, 0x200, 0x5}, {0x4000, 0x9, 0x3, 0x1ff}, {0x400, 0x9, 0x80000001, 0x9}, {0x8}, {0x5, 0x80000001, 0x7, 0xffffffff}, {0x0, 0xc5e, 0x4, 0x4}, {0x75ae, 0x7, 0x7fffffff, 0x7ff}, {0x2, 0x3bc4, 0x5, 0x8}, {0x3, 0x1000, 0x7, 0x1}, {0x2, 0x5, 0x0, 0x8}, {0x401, 0x7, 0xc000, 0x10001}, {0x6, 0x3, 0x9}, {0xffffffff, 0x2, 0x10000, 0x7}, {0x2, 0x2, 0x1, 0xffff7f3b}, {0x200, 0x7, 0x9, 0x8000}, {0xb3, 0x5, 0x1, 0x7}, {0x8001, 0xad, 0x80000000, 0x9d2}, {0xfffff001, 0x2, 0x4, 0xb3df}, {0xf95, 0x1000, 0x9137, 0x5}, {0x36a9, 0x101, 0x8, 0x326}, {0x3f, 0x9, 0x0, 0xffff}, {0x4, 0x80000001, 0x4d730adb, 0x1}, {0x1, 0x2, 0x7, 0x7}, {0x8, 0x9, 0x0, 0xa2f}, {0x81, 0x0, 0x5, 0x200}, {0x7, 0x9, 0x8, 0xfff}, {0x7e00, 0x7, 0x0, 0x3ff}, {0x1, 0x0, 0x0, 0x400}, {0x8, 0xffffffff, 0x9, 0x2}, {0x80000001, 0x935, 0x62, 0x2000000}, {0xb7dd, 0x9, 0x0, 0xfffff800}, {0x81, 0x7fffffff, 0x4f, 0x7fffffff}, {0x7fffffff, 0x30f5f68b, 0x0, 0x98}, {0xcf, 0x1, 0xfffffffe, 0x1}, {0xb500, 0x4, 0x3, 0xfff}, {0x3ff, 0x8, 0x6}, {0x7, 0xfffffff9, 0x4, 0x8af}, {0x1, 0x80d, 0x401, 0x3}, {0x10001, 0x1, 0x800, 0x81}, {0x4, 0xd9, 0xffffffff, 0x661}, {0x1ff, 0xff, 0x1, 0x9d}, {0x5, 0x2, 0x7, 0x4}, {0x3, 0x9, 0x1, 0x7}, {0x0, 0x309, 0x4, 0x4}, {0x9, 0x8, 0x8, 0x1ff}, {0x2, 0x189000, 0x618abd60, 0x80000000}, {0x10001, 0x800, 0x9, 0x8}, {0xfffffff7, 0x3, 0x6}, {0x251a, 0x349f, 0x4, 0x7}, {0x8, 0x20, 0x1, 0x3f}, {0x80000001, 0x6, 0x80, 0x1}, {0x8000, 0x3, 0x59, 0xfffffffa}, {0x7, 0x9, 0xaf, 0x9}, {0x4, 0x200, 0x8, 0x8000}, {0x95c2, 0x4, 0x5bcd, 0x2}, {0x9, 0x9, 0x400, 0x6677}, {0x2, 0x8000, 0x7, 0x80}, {0x8, 0x1a, 0x6, 0x8}, {0x8000, 0x2, 0x2, 0x2}, {0x29, 0xffffffff, 0xfffffff7, 0x1}, {0x40, 0x4, 0x2, 0x81}, {0x6, 0x7f, 0x3b2, 0x5}, {0x8, 0x0, 0x4, 0x9}, {0x8, 0x20, 0x9, 0xff}, {0x9, 0x2, 0x0, 0x2}, {0x20, 0x8, 0x5, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x9, 0x1, 0x7, 0xfff}, {0x401, 0x8001, 0xfff, 0xffff}, {0xae, 0x4, 0x3, 0x800}, {0xff, 0x5, 0x4, 0x5}, {0x6, 0x4, 0x4, 0x3}, {0xfff, 0x1, 0x8, 0x9167}, {0x1ff, 0x10001, 0x3}, {0x4, 0x5, 0x8}, {0x4, 0x2, 0x0, 0x1}, {0xfb, 0xfffffffe, 0x1f, 0x800}, {0x1, 0x8, 0x3, 0xff}, {0x2, 0x8, 0x20, 0x5}, {0xfffffffc, 0x7, 0x6, 0x3d3e58ae}, {0x5, 0x5, 0x3ff}, {0xffffffe0, 0x5cb3735d, 0x9}, {0x678, 0xf67, 0x6, 0x9}, {0x5, 0x6c7, 0xf37, 0x10000}, {0x5, 0x1, 0x1, 0x8}, {0x7fff, 0x7, 0x1737, 0x8}, {0x0, 0x7ff, 0x8, 0x3}, {0x8001, 0x0, 0x2, 0x8001}, {0x8, 0x2, 0x1, 0x3ff}, {0x2e29, 0x6107, 0x4, 0x200}, {0xffffffff, 0xa2ed, 0x85, 0xfffff000}, {0xf2a6, 0x4, 0x8, 0x1f}, {0x7, 0x8001, 0x3ff, 0x3}, {0x8, 0x7fff, 0xf5c, 0x4}, {0x5, 0x7, 0xd41, 0x80}, {0x8, 0x7, 0x39, 0x7ff}, {0x2, 0x800, 0x800, 0x4}, {0x4, 0x800, 0x1, 0x56a}, {0x800, 0x7fffffff, 0x2, 0x1}, {0x8000, 0x80000000, 0x80000000, 0x3ff}, {0x80000000, 0x8f, 0x9c6, 0x4}, {0xd19a, 0x0, 0x8, 0x400000}, {0x8, 0x400, 0x1000, 0x3}, {0x0, 0xffff, 0x9}, {0xfff, 0x4, 0xfffffff7}, {0x0, 0x8, 0x7ff, 0x3}, {0x8, 0x73f, 0x0, 0x400}, {0x8, 0xde, 0xe6, 0x9}, {0x1, 0x100, 0x987a, 0x81}, {0xcb, 0xffff, 0x0, 0x5}, {0x4a, 0x0, 0xabe7, 0x6}, {0x6, 0x5, 0x800, 0xfffffffd}, {0x1, 0x80000001, 0xffff, 0x374}, {0x4, 0x7, 0x9, 0x4}, {0x7, 0x4, 0x0, 0xa3c8}, {0x5, 0x5, 0xd4, 0x7f}, {0xfffffff9, 0x5, 0x31, 0x3}, {0x3, 0x40, 0x0, 0x5}, {0xbb, 0x2, 0x1, 0x1}, {0x0, 0x100, 0x61, 0x20}, {0x7, 0x8001, 0x8, 0x1f}, {0x3ff, 0x3, 0x8, 0x100}, {0x2, 0x20, 0x9}, {0x6b, 0x1, 0x800, 0x2}, {0x0, 0x8}, {0x4, 0xffff0fc9, 0x7, 0x65}, {0x3ff, 0x800, 0xffffffc4, 0x3}, {0x1f, 0x7, 0x0, 0x4}, {0x9, 0x7fffffff, 0x9, 0xfffff001}, {0x0, 0x80000000, 0x800, 0x2}, {0x0, 0x6, 0x9, 0x9bb6}, {0x2, 0x32, 0x400}, {0xffffffff, 0x1, 0x3, 0x7}, {0x3, 0x3f, 0x7f, 0x63}, {0x3, 0x7fff, 0x338b4485, 0x303}, {0x4816, 0x3, 0x8, 0x39}, {0x2, 0x1, 0x2, 0x1}, {0x818c, 0xe1e, 0x65, 0x7}, {0x1000, 0x7dd, 0x9, 0x1800}, {0xff, 0x7, 0xc8, 0x5}, {0xffffffff, 0x4, 0x81, 0x64cd}, {0x1, 0x0, 0xd547, 0x9}, {0x1, 0xffff, 0xffffee5f, 0xab6}, {0x8001, 0x7ff, 0x3, 0x1ffc000}, {0x81, 0x4, 0x1, 0x3f}, {0x3, 0x8, 0x80000001, 0x80000}, {0x400, 0x4, 0x7fff, 0x7fff}, {0x400, 0x4, 0x2, 0x80000001}, {0x5, 0x80000001, 0x10000}, {0x5, 0xefc, 0x8000, 0x7}, {0x2, 0x852, 0x2, 0x7fff}, {0x4, 0x7ff, 0xd2, 0x9}, {0x7, 0x3e92, 0x80, 0x723}, {0x1, 0xff, 0x1, 0x8}, {0xed9, 0x7, 0x6625ee3b, 0x6}, {0x0, 0x0, 0x40, 0x81}, {0x20, 0x3f, 0x1f, 0x9}, {0x3, 0x6000000, 0x1, 0x7fff}, {0x3, 0x4, 0x6, 0x1}, {0x200, 0x83, 0x0, 0x6490800c}, {0x20, 0xbf, 0x79, 0x81}, {0x4d, 0x1f, 0x6, 0x7a9}, {0x1, 0x3ff, 0xffff, 0x7}, {0x6, 0x5}, {0x0, 0x101, 0x2, 0xfffff800}, {0x0, 0x7, 0x3, 0x5}, {0x200, 0x4, 0x0, 0x5}, {0x78, 0x8, 0x9, 0x2}, {0xbf, 0x1, 0x20, 0x2}, {0x7, 0x8000, 0x0, 0x1}, {0x3, 0x7fff, 0x0, 0x7fff}, {0x7f, 0xfffffffd, 0x7fff, 0x7}, {0x9a6b, 0x6, 0x3, 0x68800000}, {0xb, 0x3, 0x100, 0x7fffffff}, {0xfffffc01, 0x7ff}, {0x8, 0xa5, 0x12, 0x24}, {0x4, 0x81, 0x6, 0x1f6}, {0x6, 0x4, 0x8001, 0x4}, {0x4, 0x7, 0x2, 0x401}, {0xf29, 0xf258, 0x8, 0x7f}, {0x5, 0x6, 0x400, 0x40}, {0x1c27, 0x80000001, 0x5, 0x3}, {0x0, 0x9, 0x5, 0xfffffffe}, {0x4, 0x40, 0x9, 0x4}, {0x4, 0x4, 0x3, 0x20}, {0x5, 0x3, 0x163, 0x800}, {0x80, 0x2, 0x20, 0x4}, {0x10000, 0x400, 0x5, 0x4}, {0x80, 0x9, 0x7, 0x4}, {0x9, 0x3f57, 0x80000001, 0x8c2}, {0x6f71, 0x2, 0x1ff, 0x6}, {0x7, 0x101, 0x1, 0x3}, {0x4, 0x0, 0x1ff, 0x5}, {0x7ff, 0x7, 0x7, 0x200}, {0x0, 0x4, 0x5, 0x7}, {0x3e6, 0xe5, 0x5, 0x8}, {0x4, 0x200, 0x7, 0x9}, {0x200, 0x3, 0x576b, 0x8}, {0x1, 0xffff, 0x400, 0x3}, {0x10000, 0x6, 0x4, 0x55b8d705}, {0x8000, 0xf0000000, 0x3, 0x9}, {0x1, 0xffffffff, 0x7, 0x4}, {0xffffffff, 0x1c, 0x4b9, 0xae}, {0x0, 0x1, 0xb1, 0xffffff01}, {0x81, 0xbac0, 0x80000001, 0x8}, {0x4, 0x6, 0xb2e6}, {0x1, 0x6, 0x8001, 0x3ff}, {0x0, 0x800, 0x3ed, 0x3}, {0x9, 0x29f, 0x3f, 0xffff}, {0x1, 0xfbd, 0x7, 0x8}, {0x0, 0x35ec, 0x0, 0x1000}, {0x2c6, 0x3, 0x0, 0xdf}, {0x6ef7, 0x5, 0x20}, {0xefc1, 0x1, 0x8, 0x9}, {0x1, 0x4, 0xebba, 0xffff}, {0x101, 0xc2, 0x0, 0x7f}, {0x2, 0x4, 0x9, 0x2}, {0x1ff, 0xd3a, 0x2, 0x7}, {0x2, 0x2, 0x1ff, 0x80000000}, {0x3ff, 0x3ff, 0x10000, 0x7}, {0x5, 0x3ff, 0x7fffffff, 0x4}, {0x5, 0x1, 0x8, 0x8}, {0x3, 0x46ae, 0x2, 0x1}, {0x3, 0x0, 0x1f, 0x9}, {0x7, 0xfffffff7, 0xa45, 0xf2e}, {0x9, 0xfc0, 0x0, 0x1}, {0x28, 0x12, 0x80, 0x6}, {0x9, 0x572, 0x2, 0x2}, {0x80000001, 0x1, 0x5, 0x830}, {0x1ce, 0xffff8001, 0x80000001, 0x5}, {0x7fffffff, 0x4, 0x6, 0x10000}, {0x9, 0xaeaa, 0x9, 0x3}, {0x7, 0x80, 0x4}, {0x1, 0x100, 0x0, 0x10000}, {0x9, 0x5, 0x6, 0x401}, {0x3, 0x9, 0xdf4d, 0x55a8}, {0xfffffff8, 0xffffffff, 0x96, 0x4}, {0x8, 0x5, 0xfffffffc, 0x9}, {0xfffffcb9, 0x80, 0xfffffc01, 0xffff}, {0x8, 0x3, 0xffffffe1, 0xfffffffb}, {0x0, 0x2, 0x7, 0x100}, {0x0, 0x9, 0x3, 0x4a88}, {0x8, 0xff, 0x5, 0x5}, {0x1, 0x5, 0xef, 0x2}, {0x0, 0x5, 0x8001, 0x40}, {0x1385628e, 0x20, 0x8, 0x3}, {0x0, 0x1, 0x8001, 0x7ff}, {0x9, 0x8, 0x7ff, 0x9}, {0x6, 0xfffffff8, 0x7, 0xfffffc00}, {0x5, 0x38babec3, 0x4, 0x2}, {0x80000001, 0x94, 0x7ff, 0xa4c}, {0x1, 0x6, 0x400, 0x20}, {0x9, 0x8000, 0x7fffffff, 0x7}, {0x5, 0x7, 0xffffffff, 0x6}, {0x3, 0x6, 0x1000, 0x6}, {0x7e2, 0x4, 0x6, 0x8}, {0x800, 0x0, 0x10000, 0x9}, {0x9, 0x7ff, 0x2, 0x9}, {0x8, 0x10000, 0x80, 0x200}, {0x0, 0x80, 0x2, 0x4}, {0x7fff, 0x3, 0x1, 0x2}, {0x5, 0x810, 0xfffffffc, 0x81}]}, 0x16ee) (rerun: 32) 20:46:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0xc2001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:01 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getuid() getresgid(&(0x7f0000004140), &(0x7f0000004180), &(0x7f00000041c0)=0x0) r6 = getuid() r7 = getuid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000004200)={0x670, 0x0, 0x0, [{{0x5, 0x3, 0x3, 0x8, 0x2, 0xffffffff, {0x6, 0x3f, 0x0, 0x1, 0xaf, 0x80, 0x50000000, 0x6, 0x100, 0x1000, 0x2, 0xee00, 0x0, 0x100, 0x3f}}, {0x5, 0x2, 0x1, 0x1, '$'}}, {{0x2, 0x0, 0x9, 0x8000000000000000, 0x7, 0x800, {0x0, 0x3, 0x3, 0x5, 0x6, 0xb1, 0x3, 0x1, 0x6, 0x6000, 0xd939, 0xffffffffffffffff, 0xee01, 0x6, 0xf33}}, {0x2, 0x6, 0xc, 0x8, '/dev/random\x00'}}, {{0x1, 0x1, 0xe4, 0x8001, 0x0, 0xffffffff, {0x1, 0x401, 0x5, 0x0, 0x3, 0x6, 0x1, 0x81, 0x9, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x0, 0x400, 0x8, 0x6, '@-,\'\'}@%'}}, {{0x335, 0x1, 0x6, 0x1, 0x8, 0x3ff, {0x3, 0x100000001, 0x700000, 0x2, 0x1ff, 0xfffffffffffffff9, 0x9, 0x3, 0x6975, 0x6000, 0x7, r2, 0xee01, 0x0, 0x8}}, {0x1, 0x4, 0xc, 0x7fffffff, '/dev/random\x00'}}, {{0x4, 0x0, 0xd1, 0x7f, 0x1, 0x9, {0x0, 0x7fffffff, 0x7, 0x0, 0x1c8, 0x1, 0x5, 0xfffffff9, 0x20, 0x2000, 0x1, 0xee01, r3, 0xe0000, 0x101}}, {0x1, 0x3, 0x2, 0x200, '\r/'}}, {{0x0, 0x1, 0x1ac, 0x4, 0x5, 0x636, {0x6, 0x7fffffff, 0x8, 0x44c, 0x8, 0x2, 0x1, 0x1b, 0x3, 0x4000, 0x7, r4, 0xffffffffffffffff, 0x0, 0xffffffff}}, {0x3, 0x5, 0x1, 0x8, '['}}, {{0x1, 0x1, 0x7ff, 0x3baa, 0x40, 0x1, {0x2, 0x2, 0xd7, 0x8, 0xd479, 0x6d, 0x38ba, 0xffffff7f, 0x5, 0x6000, 0x4, 0xee01, r5, 0x9, 0x7ff}}, {0x6, 0x2, 0xc, 0x57d, '/dev/random\x00'}}, {{0x5, 0x2, 0x6, 0xfdda, 0x1881c9f0, 0x9bcf, {0x2, 0x440, 0x645, 0x6, 0x8, 0x0, 0x400, 0x7fff, 0xfffffffd, 0xc000, 0x20, r6, 0xee00, 0x58103b68, 0x4}}, {0x2, 0x5b, 0xc, 0x99, '/dev/random\x00'}}, {{0x0, 0x1, 0x46, 0x9, 0x4, 0x7, {0x0, 0x69, 0x748a, 0x2, 0x3, 0x7f, 0x9, 0x9, 0x8, 0x4000, 0x3, 0xffffffffffffffff, 0xee00, 0x322, 0x10000}}, {0x3, 0x4, 0xc, 0x2, '/dev/random\x00'}}, {{0x5, 0x1, 0xd77, 0x0, 0x7, 0x81, {0x2, 0x0, 0x1, 0x0, 0x8294, 0x1ff, 0x0, 0x5a, 0x2, 0xc000, 0x7, r7, 0x0, 0x7, 0xd7f}}, {0x1, 0x200, 0x0, 0x6}}]}, 0x670) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000400)) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) r3 = geteuid() (async) r4 = geteuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2200020, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c616c6c6faece01b06865722c7569643c", @ANYRESDEC=0xee01, @ANYBLOB=',func=FILE_CHECK,uid>', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC=r4, @ANYBLOB=',obj_user=/dev/dri/card#\x00,\x00']) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000100)=""/146) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x100000) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = getuid() (async) getresgid(&(0x7f0000004140), &(0x7f0000004180), &(0x7f00000041c0)=0x0) (async) r6 = getuid() (async) r7 = getuid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000004200)={0x670, 0x0, 0x0, [{{0x5, 0x3, 0x3, 0x8, 0x2, 0xffffffff, {0x6, 0x3f, 0x0, 0x1, 0xaf, 0x80, 0x50000000, 0x6, 0x100, 0x1000, 0x2, 0xee00, 0x0, 0x100, 0x3f}}, {0x5, 0x2, 0x1, 0x1, '$'}}, {{0x2, 0x0, 0x9, 0x8000000000000000, 0x7, 0x800, {0x0, 0x3, 0x3, 0x5, 0x6, 0xb1, 0x3, 0x1, 0x6, 0x6000, 0xd939, 0xffffffffffffffff, 0xee01, 0x6, 0xf33}}, {0x2, 0x6, 0xc, 0x8, '/dev/random\x00'}}, {{0x1, 0x1, 0xe4, 0x8001, 0x0, 0xffffffff, {0x1, 0x401, 0x5, 0x0, 0x3, 0x6, 0x1, 0x81, 0x9, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x0, 0x400, 0x8, 0x6, '@-,\'\'}@%'}}, {{0x335, 0x1, 0x6, 0x1, 0x8, 0x3ff, {0x3, 0x100000001, 0x700000, 0x2, 0x1ff, 0xfffffffffffffff9, 0x9, 0x3, 0x6975, 0x6000, 0x7, r2, 0xee01, 0x0, 0x8}}, {0x1, 0x4, 0xc, 0x7fffffff, '/dev/random\x00'}}, {{0x4, 0x0, 0xd1, 0x7f, 0x1, 0x9, {0x0, 0x7fffffff, 0x7, 0x0, 0x1c8, 0x1, 0x5, 0xfffffff9, 0x20, 0x2000, 0x1, 0xee01, r3, 0xe0000, 0x101}}, {0x1, 0x3, 0x2, 0x200, '\r/'}}, {{0x0, 0x1, 0x1ac, 0x4, 0x5, 0x636, {0x6, 0x7fffffff, 0x8, 0x44c, 0x8, 0x2, 0x1, 0x1b, 0x3, 0x4000, 0x7, r4, 0xffffffffffffffff, 0x0, 0xffffffff}}, {0x3, 0x5, 0x1, 0x8, '['}}, {{0x1, 0x1, 0x7ff, 0x3baa, 0x40, 0x1, {0x2, 0x2, 0xd7, 0x8, 0xd479, 0x6d, 0x38ba, 0xffffff7f, 0x5, 0x6000, 0x4, 0xee01, r5, 0x9, 0x7ff}}, {0x6, 0x2, 0xc, 0x57d, '/dev/random\x00'}}, {{0x5, 0x2, 0x6, 0xfdda, 0x1881c9f0, 0x9bcf, {0x2, 0x440, 0x645, 0x6, 0x8, 0x0, 0x400, 0x7fff, 0xfffffffd, 0xc000, 0x20, r6, 0xee00, 0x58103b68, 0x4}}, {0x2, 0x5b, 0xc, 0x99, '/dev/random\x00'}}, {{0x0, 0x1, 0x46, 0x9, 0x4, 0x7, {0x0, 0x69, 0x748a, 0x2, 0x3, 0x7f, 0x9, 0x9, 0x8, 0x4000, 0x3, 0xffffffffffffffff, 0xee00, 0x322, 0x10000}}, {0x3, 0x4, 0xc, 0x2, '/dev/random\x00'}}, {{0x5, 0x1, 0xd77, 0x0, 0x7, 0x81, {0x2, 0x0, 0x1, 0x0, 0x8294, 0x1ff, 0x0, 0x5a, 0x2, 0xc000, 0x7, r7, 0x0, 0x7, 0xd7f}}, {0x1, 0x200, 0x0, 0x6}}]}, 0x670) (async, rerun: 64) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (rerun: 64) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) 20:46:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) write$usbip_server(r0, &(0x7f0000000180)=@ret_submit={{0x3, 0x3, 0x0, 0x1, 0x80}, 0x0, 0x9e, 0x4, 0x162, 0x0, 0x0, "0c78b8ee70e933b2d0e210ab00279af6ae689c6c849d82985ce8730ae60a625209e056110ce9e68baf1d843aa2016bc6450b71e0829a89b4b6907a4ec7f78ba642ccbe1e02c824bfaa241c3cb133317e6a8242adf49a219e107bfb6d1aa1f2b1f0a25342922060ede8a21b600da55798d29ba0a3e91f4f4f29f979a510b26aab91472e4e14193b447ac726213c3624f29b43a8656785770c188aa2505dcf", [{0xf2, 0x1, 0x7fffffff, 0x7}, {0xef5, 0x4, 0x81, 0x6}, {0x8, 0x9, 0xc000000, 0x3f}, {0x1, 0x29f, 0x6, 0x3}, {0xeb3, 0x1, 0xffff, 0x89b}, {0x7, 0x3f, 0x2, 0x6}, {0x2, 0x1000, 0x4, 0x9}, {0xa9, 0x1, 0x2, 0x6}, {0x7f, 0x7, 0x3, 0x9}, {0x3, 0x8, 0x9, 0x4000400}, {0x3, 0x7fff, 0x1ff, 0x9}, {0x1, 0x5, 0x2, 0x6}, {0x1, 0x4, 0xe4c, 0x80000001}, {0x80000000, 0xff, 0x1ff, 0x9}, {0x400, 0x522e, 0x4, 0x3}, {0x7, 0xffffffff, 0x4, 0x4}, {0x20, 0x8000, 0x401, 0x9}, {0x3f, 0x101, 0x205, 0x7fffffff}, {0xe9, 0x3ff, 0xfffffffe, 0xd9}, {0x2, 0x7, 0x1f, 0x6}, {0xffffffff, 0xff, 0x3, 0x1}, {0x80, 0x8a0, 0x5, 0x5}, {0x5, 0x9, 0x1, 0x8e6}, {0x100, 0x0, 0x0, 0x8}, {0x3, 0x9, 0x9, 0x80000001}, {0x9, 0x81, 0x9, 0x982a}, {0x7, 0x35685324, 0x7fffffff, 0x55d}, {0x1000, 0x2, 0x6, 0x6}, {0x7, 0x5, 0xdc, 0x4}, {0x80000001, 0x3, 0x2c34, 0x2}, {0x4, 0x7, 0x0, 0x17}, {0xffff7fff, 0x3, 0x8, 0x3}, {0x6, 0x3, 0x8, 0x100}, {0x2, 0xfffffffe, 0x9, 0x3}, {0xffff, 0x101, 0x1, 0x8}, {0x3d0c1da5, 0x6, 0x7fffffff, 0x4}, {0xb4d5, 0x0, 0xc5, 0x5}, {0x3f, 0x100, 0x0, 0x1ff}, {0x2, 0x7, 0xef83, 0x9}, {0x3f, 0x9, 0x49e, 0x9}, {0x400, 0xfffffffe, 0x4, 0x80000000}, {0x81, 0xb772, 0xffffffff, 0x8000}, {0x0, 0xffffffc0, 0x800, 0x179}, {0x0, 0x5, 0x7e9e, 0x9}, {0x9, 0x3, 0x7, 0x8000}, {0x9, 0x100, 0xffff0000, 0x19e}, {0x9, 0x9, 0x2, 0x6}, {0x7f, 0x2fe, 0x0, 0x3e}, {0x7, 0x800, 0x3, 0x4}, {0x7fffffff, 0x3, 0x401}, {0x8, 0x5, 0x2, 0x3e}, {0x1, 0x3, 0x7, 0x6}, {0x8, 0x8, 0xdd0, 0x9af}, {0x8000, 0x80000, 0x80000000, 0xfffffffd}, {0x7fff, 0xffff, 0x0, 0x734}, {0x10000, 0x6, 0x7f, 0x1ff}, {0x100, 0x100, 0x101, 0x6}, {0x813, 0x8, 0x5, 0x100}, {0x9, 0x4, 0x6e6, 0x3}, {0x7f, 0x9, 0x5, 0x4}, {0x7, 0x200, 0x7f, 0xae}, {0x0, 0x0, 0x8, 0x9}, {0xe1, 0x1, 0xfff, 0xeb}, {0x7f00000, 0x401, 0x7f, 0x7fff}, {0x4, 0x8000, 0x300, 0x8}, {0x2, 0x8d, 0x8, 0xc}, {0x85, 0x10000, 0x0, 0x7}, {0x2018fb8a, 0x9, 0x8, 0x6}, {0x4, 0x3, 0x7fffffff}, {0x8, 0x5, 0x8d, 0x20}, {0x4, 0x8, 0x7, 0x1}, {0x1f, 0x8, 0x2, 0x6}, {0x0, 0xfffff50a, 0x5, 0xfffffffc}, {0x7, 0x921, 0x2, 0x4f}, {0x80000001, 0x5, 0x4, 0xed1}, {0x5, 0x7, 0x81, 0x8000}, {0x2, 0x1, 0x7, 0xffff}, {0x19, 0x2, 0x1, 0x1}, {0x6, 0x12000, 0x80000000, 0x2}, {0x3ff, 0x81, 0x8001, 0xffffffff}, {0x8, 0x7f, 0x1, 0x2}, {0x7fffffff, 0xaa3, 0xff, 0x7c3f2f1a}, {0xfff, 0x3, 0x3, 0x982}, {0x1, 0x4, 0x2, 0x80}, {0x9, 0xfffff000, 0xffff, 0x80000001}, {0x95, 0x1, 0x3, 0x2}, {0xfffff000, 0x0, 0x2, 0x6}, {0x1f, 0x1, 0x97f5, 0x4}, {0x3f, 0x3f, 0x8000, 0x8}, {0x8, 0x3, 0x1b4e, 0x100}, {0x40, 0x9, 0x1, 0x2}, {0x1, 0x200, 0x80, 0x100}, {0x1, 0x7, 0x200, 0x5}, {0x4000, 0x9, 0x3, 0x1ff}, {0x400, 0x9, 0x80000001, 0x9}, {0x8}, {0x5, 0x80000001, 0x7, 0xffffffff}, {0x0, 0xc5e, 0x4, 0x4}, {0x75ae, 0x7, 0x7fffffff, 0x7ff}, {0x2, 0x3bc4, 0x5, 0x8}, {0x3, 0x1000, 0x7, 0x1}, {0x2, 0x5, 0x0, 0x8}, {0x401, 0x7, 0xc000, 0x10001}, {0x6, 0x3, 0x9}, {0xffffffff, 0x2, 0x10000, 0x7}, {0x2, 0x2, 0x1, 0xffff7f3b}, {0x200, 0x7, 0x9, 0x8000}, {0xb3, 0x5, 0x1, 0x7}, {0x8001, 0xad, 0x80000000, 0x9d2}, {0xfffff001, 0x2, 0x4, 0xb3df}, {0xf95, 0x1000, 0x9137, 0x5}, {0x36a9, 0x101, 0x8, 0x326}, {0x3f, 0x9, 0x0, 0xffff}, {0x4, 0x80000001, 0x4d730adb, 0x1}, {0x1, 0x2, 0x7, 0x7}, {0x8, 0x9, 0x0, 0xa2f}, {0x81, 0x0, 0x5, 0x200}, {0x7, 0x9, 0x8, 0xfff}, {0x7e00, 0x7, 0x0, 0x3ff}, {0x1, 0x0, 0x0, 0x400}, {0x8, 0xffffffff, 0x9, 0x2}, {0x80000001, 0x935, 0x62, 0x2000000}, {0xb7dd, 0x9, 0x0, 0xfffff800}, {0x81, 0x7fffffff, 0x4f, 0x7fffffff}, {0x7fffffff, 0x30f5f68b, 0x0, 0x98}, {0xcf, 0x1, 0xfffffffe, 0x1}, {0xb500, 0x4, 0x3, 0xfff}, {0x3ff, 0x8, 0x6}, {0x7, 0xfffffff9, 0x4, 0x8af}, {0x1, 0x80d, 0x401, 0x3}, {0x10001, 0x1, 0x800, 0x81}, {0x4, 0xd9, 0xffffffff, 0x661}, {0x1ff, 0xff, 0x1, 0x9d}, {0x5, 0x2, 0x7, 0x4}, {0x3, 0x9, 0x1, 0x7}, {0x0, 0x309, 0x4, 0x4}, {0x9, 0x8, 0x8, 0x1ff}, {0x2, 0x189000, 0x618abd60, 0x80000000}, {0x10001, 0x800, 0x9, 0x8}, {0xfffffff7, 0x3, 0x6}, {0x251a, 0x349f, 0x4, 0x7}, {0x8, 0x20, 0x1, 0x3f}, {0x80000001, 0x6, 0x80, 0x1}, {0x8000, 0x3, 0x59, 0xfffffffa}, {0x7, 0x9, 0xaf, 0x9}, {0x4, 0x200, 0x8, 0x8000}, {0x95c2, 0x4, 0x5bcd, 0x2}, {0x9, 0x9, 0x400, 0x6677}, {0x2, 0x8000, 0x7, 0x80}, {0x8, 0x1a, 0x6, 0x8}, {0x8000, 0x2, 0x2, 0x2}, {0x29, 0xffffffff, 0xfffffff7, 0x1}, {0x40, 0x4, 0x2, 0x81}, {0x6, 0x7f, 0x3b2, 0x5}, {0x8, 0x0, 0x4, 0x9}, {0x8, 0x20, 0x9, 0xff}, {0x9, 0x2, 0x0, 0x2}, {0x20, 0x8, 0x5, 0x7}, {0x9, 0x1, 0x2, 0x6}, {0x9, 0x1, 0x7, 0xfff}, {0x401, 0x8001, 0xfff, 0xffff}, {0xae, 0x4, 0x3, 0x800}, {0xff, 0x5, 0x4, 0x5}, {0x6, 0x4, 0x4, 0x3}, {0xfff, 0x1, 0x8, 0x9167}, {0x1ff, 0x10001, 0x3}, {0x4, 0x5, 0x8}, {0x4, 0x2, 0x0, 0x1}, {0xfb, 0xfffffffe, 0x1f, 0x800}, {0x1, 0x8, 0x3, 0xff}, {0x2, 0x8, 0x20, 0x5}, {0xfffffffc, 0x7, 0x6, 0x3d3e58ae}, {0x5, 0x5, 0x3ff}, {0xffffffe0, 0x5cb3735d, 0x9}, {0x678, 0xf67, 0x6, 0x9}, {0x5, 0x6c7, 0xf37, 0x10000}, {0x5, 0x1, 0x1, 0x8}, {0x7fff, 0x7, 0x1737, 0x8}, {0x0, 0x7ff, 0x8, 0x3}, {0x8001, 0x0, 0x2, 0x8001}, {0x8, 0x2, 0x1, 0x3ff}, {0x2e29, 0x6107, 0x4, 0x200}, {0xffffffff, 0xa2ed, 0x85, 0xfffff000}, {0xf2a6, 0x4, 0x8, 0x1f}, {0x7, 0x8001, 0x3ff, 0x3}, {0x8, 0x7fff, 0xf5c, 0x4}, {0x5, 0x7, 0xd41, 0x80}, {0x8, 0x7, 0x39, 0x7ff}, {0x2, 0x800, 0x800, 0x4}, {0x4, 0x800, 0x1, 0x56a}, {0x800, 0x7fffffff, 0x2, 0x1}, {0x8000, 0x80000000, 0x80000000, 0x3ff}, {0x80000000, 0x8f, 0x9c6, 0x4}, {0xd19a, 0x0, 0x8, 0x400000}, {0x8, 0x400, 0x1000, 0x3}, {0x0, 0xffff, 0x9}, {0xfff, 0x4, 0xfffffff7}, {0x0, 0x8, 0x7ff, 0x3}, {0x8, 0x73f, 0x0, 0x400}, {0x8, 0xde, 0xe6, 0x9}, {0x1, 0x100, 0x987a, 0x81}, {0xcb, 0xffff, 0x0, 0x5}, {0x4a, 0x0, 0xabe7, 0x6}, {0x6, 0x5, 0x800, 0xfffffffd}, {0x1, 0x80000001, 0xffff, 0x374}, {0x4, 0x7, 0x9, 0x4}, {0x7, 0x4, 0x0, 0xa3c8}, {0x5, 0x5, 0xd4, 0x7f}, {0xfffffff9, 0x5, 0x31, 0x3}, {0x3, 0x40, 0x0, 0x5}, {0xbb, 0x2, 0x1, 0x1}, {0x0, 0x100, 0x61, 0x20}, {0x7, 0x8001, 0x8, 0x1f}, {0x3ff, 0x3, 0x8, 0x100}, {0x2, 0x20, 0x9}, {0x6b, 0x1, 0x800, 0x2}, {0x0, 0x8}, {0x4, 0xffff0fc9, 0x7, 0x65}, {0x3ff, 0x800, 0xffffffc4, 0x3}, {0x1f, 0x7, 0x0, 0x4}, {0x9, 0x7fffffff, 0x9, 0xfffff001}, {0x0, 0x80000000, 0x800, 0x2}, {0x0, 0x6, 0x9, 0x9bb6}, {0x2, 0x32, 0x400}, {0xffffffff, 0x1, 0x3, 0x7}, {0x3, 0x3f, 0x7f, 0x63}, {0x3, 0x7fff, 0x338b4485, 0x303}, {0x4816, 0x3, 0x8, 0x39}, {0x2, 0x1, 0x2, 0x1}, {0x818c, 0xe1e, 0x65, 0x7}, {0x1000, 0x7dd, 0x9, 0x1800}, {0xff, 0x7, 0xc8, 0x5}, {0xffffffff, 0x4, 0x81, 0x64cd}, {0x1, 0x0, 0xd547, 0x9}, {0x1, 0xffff, 0xffffee5f, 0xab6}, {0x8001, 0x7ff, 0x3, 0x1ffc000}, {0x81, 0x4, 0x1, 0x3f}, {0x3, 0x8, 0x80000001, 0x80000}, {0x400, 0x4, 0x7fff, 0x7fff}, {0x400, 0x4, 0x2, 0x80000001}, {0x5, 0x80000001, 0x10000}, {0x5, 0xefc, 0x8000, 0x7}, {0x2, 0x852, 0x2, 0x7fff}, {0x4, 0x7ff, 0xd2, 0x9}, {0x7, 0x3e92, 0x80, 0x723}, {0x1, 0xff, 0x1, 0x8}, {0xed9, 0x7, 0x6625ee3b, 0x6}, {0x0, 0x0, 0x40, 0x81}, {0x20, 0x3f, 0x1f, 0x9}, {0x3, 0x6000000, 0x1, 0x7fff}, {0x3, 0x4, 0x6, 0x1}, {0x200, 0x83, 0x0, 0x6490800c}, {0x20, 0xbf, 0x79, 0x81}, {0x4d, 0x1f, 0x6, 0x7a9}, {0x1, 0x3ff, 0xffff, 0x7}, {0x6, 0x5}, {0x0, 0x101, 0x2, 0xfffff800}, {0x0, 0x7, 0x3, 0x5}, {0x200, 0x4, 0x0, 0x5}, {0x78, 0x8, 0x9, 0x2}, {0xbf, 0x1, 0x20, 0x2}, {0x7, 0x8000, 0x0, 0x1}, {0x3, 0x7fff, 0x0, 0x7fff}, {0x7f, 0xfffffffd, 0x7fff, 0x7}, {0x9a6b, 0x6, 0x3, 0x68800000}, {0xb, 0x3, 0x100, 0x7fffffff}, {0xfffffc01, 0x7ff}, {0x8, 0xa5, 0x12, 0x24}, {0x4, 0x81, 0x6, 0x1f6}, {0x6, 0x4, 0x8001, 0x4}, {0x4, 0x7, 0x2, 0x401}, {0xf29, 0xf258, 0x8, 0x7f}, {0x5, 0x6, 0x400, 0x40}, {0x1c27, 0x80000001, 0x5, 0x3}, {0x0, 0x9, 0x5, 0xfffffffe}, {0x4, 0x40, 0x9, 0x4}, {0x4, 0x4, 0x3, 0x20}, {0x5, 0x3, 0x163, 0x800}, {0x80, 0x2, 0x20, 0x4}, {0x10000, 0x400, 0x5, 0x4}, {0x80, 0x9, 0x7, 0x4}, {0x9, 0x3f57, 0x80000001, 0x8c2}, {0x6f71, 0x2, 0x1ff, 0x6}, {0x7, 0x101, 0x1, 0x3}, {0x4, 0x0, 0x1ff, 0x5}, {0x7ff, 0x7, 0x7, 0x200}, {0x0, 0x4, 0x5, 0x7}, {0x3e6, 0xe5, 0x5, 0x8}, {0x4, 0x200, 0x7, 0x9}, {0x200, 0x3, 0x576b, 0x8}, {0x1, 0xffff, 0x400, 0x3}, {0x10000, 0x6, 0x4, 0x55b8d705}, {0x8000, 0xf0000000, 0x3, 0x9}, {0x1, 0xffffffff, 0x7, 0x4}, {0xffffffff, 0x1c, 0x4b9, 0xae}, {0x0, 0x1, 0xb1, 0xffffff01}, {0x81, 0xbac0, 0x80000001, 0x8}, {0x4, 0x6, 0xb2e6}, {0x1, 0x6, 0x8001, 0x3ff}, {0x0, 0x800, 0x3ed, 0x3}, {0x9, 0x29f, 0x3f, 0xffff}, {0x1, 0xfbd, 0x7, 0x8}, {0x0, 0x35ec, 0x0, 0x1000}, {0x2c6, 0x3, 0x0, 0xdf}, {0x6ef7, 0x5, 0x20}, {0xefc1, 0x1, 0x8, 0x9}, {0x1, 0x4, 0xebba, 0xffff}, {0x101, 0xc2, 0x0, 0x7f}, {0x2, 0x4, 0x9, 0x2}, {0x1ff, 0xd3a, 0x2, 0x7}, {0x2, 0x2, 0x1ff, 0x80000000}, {0x3ff, 0x3ff, 0x10000, 0x7}, {0x5, 0x3ff, 0x7fffffff, 0x4}, {0x5, 0x1, 0x8, 0x8}, {0x3, 0x46ae, 0x2, 0x1}, {0x3, 0x0, 0x1f, 0x9}, {0x7, 0xfffffff7, 0xa45, 0xf2e}, {0x9, 0xfc0, 0x0, 0x1}, {0x28, 0x12, 0x80, 0x6}, {0x9, 0x572, 0x2, 0x2}, {0x80000001, 0x1, 0x5, 0x830}, {0x1ce, 0xffff8001, 0x80000001, 0x5}, {0x7fffffff, 0x4, 0x6, 0x10000}, {0x9, 0xaeaa, 0x9, 0x3}, {0x7, 0x80, 0x4}, {0x1, 0x100, 0x0, 0x10000}, {0x9, 0x5, 0x6, 0x401}, {0x3, 0x9, 0xdf4d, 0x55a8}, {0xfffffff8, 0xffffffff, 0x96, 0x4}, {0x8, 0x5, 0xfffffffc, 0x9}, {0xfffffcb9, 0x80, 0xfffffc01, 0xffff}, {0x8, 0x3, 0xffffffe1, 0xfffffffb}, {0x0, 0x2, 0x7, 0x100}, {0x0, 0x9, 0x3, 0x4a88}, {0x8, 0xff, 0x5, 0x5}, {0x1, 0x5, 0xef, 0x2}, {0x0, 0x5, 0x8001, 0x40}, {0x1385628e, 0x20, 0x8, 0x3}, {0x0, 0x1, 0x8001, 0x7ff}, {0x9, 0x8, 0x7ff, 0x9}, {0x6, 0xfffffff8, 0x7, 0xfffffc00}, {0x5, 0x38babec3, 0x4, 0x2}, {0x80000001, 0x94, 0x7ff, 0xa4c}, {0x1, 0x6, 0x400, 0x20}, {0x9, 0x8000, 0x7fffffff, 0x7}, {0x5, 0x7, 0xffffffff, 0x6}, {0x3, 0x6, 0x1000, 0x6}, {0x7e2, 0x4, 0x6, 0x8}, {0x800, 0x0, 0x10000, 0x9}, {0x9, 0x7ff, 0x2, 0x9}, {0x8, 0x10000, 0x80, 0x200}, {0x0, 0x80, 0x2, 0x4}, {0x7fff, 0x3, 0x1, 0x2}, {0x5, 0x810, 0xfffffffc, 0x81}]}, 0x16ee) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xb5, 0x101200) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/4) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x80000001}) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) r3 = geteuid() r4 = geteuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2200020, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c616c6c6faece01b06865722c7569643c", @ANYRESDEC=0xee01, @ANYBLOB=',func=FILE_CHECK,uid>', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC=r4, @ANYBLOB=',obj_user=/dev/dri/card#\x00,\x00']) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getuid() getresgid(&(0x7f0000004140), &(0x7f0000004180), &(0x7f00000041c0)=0x0) r6 = getuid() r7 = getuid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000004200)={0x670, 0x0, 0x0, [{{0x5, 0x3, 0x3, 0x8, 0x2, 0xffffffff, {0x6, 0x3f, 0x0, 0x1, 0xaf, 0x80, 0x50000000, 0x6, 0x100, 0x1000, 0x2, 0xee00, 0x0, 0x100, 0x3f}}, {0x5, 0x2, 0x1, 0x1, '$'}}, {{0x2, 0x0, 0x9, 0x8000000000000000, 0x7, 0x800, {0x0, 0x3, 0x3, 0x5, 0x6, 0xb1, 0x3, 0x1, 0x6, 0x6000, 0xd939, 0xffffffffffffffff, 0xee01, 0x6, 0xf33}}, {0x2, 0x6, 0xc, 0x8, '/dev/random\x00'}}, {{0x1, 0x1, 0xe4, 0x8001, 0x0, 0xffffffff, {0x1, 0x401, 0x5, 0x0, 0x3, 0x6, 0x1, 0x81, 0x9, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x0, 0x400, 0x8, 0x6, '@-,\'\'}@%'}}, {{0x335, 0x1, 0x6, 0x1, 0x8, 0x3ff, {0x3, 0x100000001, 0x700000, 0x2, 0x1ff, 0xfffffffffffffff9, 0x9, 0x3, 0x6975, 0x6000, 0x7, r2, 0xee01, 0x0, 0x8}}, {0x1, 0x4, 0xc, 0x7fffffff, '/dev/random\x00'}}, {{0x4, 0x0, 0xd1, 0x7f, 0x1, 0x9, {0x0, 0x7fffffff, 0x7, 0x0, 0x1c8, 0x1, 0x5, 0xfffffff9, 0x20, 0x2000, 0x1, 0xee01, r3, 0xe0000, 0x101}}, {0x1, 0x3, 0x2, 0x200, '\r/'}}, {{0x0, 0x1, 0x1ac, 0x4, 0x5, 0x636, {0x6, 0x7fffffff, 0x8, 0x44c, 0x8, 0x2, 0x1, 0x1b, 0x3, 0x4000, 0x7, r4, 0xffffffffffffffff, 0x0, 0xffffffff}}, {0x3, 0x5, 0x1, 0x8, '['}}, {{0x1, 0x1, 0x7ff, 0x3baa, 0x40, 0x1, {0x2, 0x2, 0xd7, 0x8, 0xd479, 0x6d, 0x38ba, 0xffffff7f, 0x5, 0x6000, 0x4, 0xee01, r5, 0x9, 0x7ff}}, {0x6, 0x2, 0xc, 0x57d, '/dev/random\x00'}}, {{0x5, 0x2, 0x6, 0xfdda, 0x1881c9f0, 0x9bcf, {0x2, 0x440, 0x645, 0x6, 0x8, 0x0, 0x400, 0x7fff, 0xfffffffd, 0xc000, 0x20, r6, 0xee00, 0x58103b68, 0x4}}, {0x2, 0x5b, 0xc, 0x99, '/dev/random\x00'}}, {{0x0, 0x1, 0x46, 0x9, 0x4, 0x7, {0x0, 0x69, 0x748a, 0x2, 0x3, 0x7f, 0x9, 0x9, 0x8, 0x4000, 0x3, 0xffffffffffffffff, 0xee00, 0x322, 0x10000}}, {0x3, 0x4, 0xc, 0x2, '/dev/random\x00'}}, {{0x5, 0x1, 0xd77, 0x0, 0x7, 0x81, {0x2, 0x0, 0x1, 0x0, 0x8294, 0x1ff, 0x0, 0x5a, 0x2, 0xc000, 0x7, r7, 0x0, 0x7, 0xd7f}}, {0x1, 0x200, 0x0, 0x6}}]}, 0x670) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) (async) getuid() (async) getresgid(&(0x7f0000004140), &(0x7f0000004180), &(0x7f00000041c0)) (async) getuid() (async) getuid() (async) write$FUSE_DIRENTPLUS(r1, &(0x7f0000004200)={0x670, 0x0, 0x0, [{{0x5, 0x3, 0x3, 0x8, 0x2, 0xffffffff, {0x6, 0x3f, 0x0, 0x1, 0xaf, 0x80, 0x50000000, 0x6, 0x100, 0x1000, 0x2, 0xee00, 0x0, 0x100, 0x3f}}, {0x5, 0x2, 0x1, 0x1, '$'}}, {{0x2, 0x0, 0x9, 0x8000000000000000, 0x7, 0x800, {0x0, 0x3, 0x3, 0x5, 0x6, 0xb1, 0x3, 0x1, 0x6, 0x6000, 0xd939, 0xffffffffffffffff, 0xee01, 0x6, 0xf33}}, {0x2, 0x6, 0xc, 0x8, '/dev/random\x00'}}, {{0x1, 0x1, 0xe4, 0x8001, 0x0, 0xffffffff, {0x1, 0x401, 0x5, 0x0, 0x3, 0x6, 0x1, 0x81, 0x9, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x0, 0x400, 0x8, 0x6, '@-,\'\'}@%'}}, {{0x335, 0x1, 0x6, 0x1, 0x8, 0x3ff, {0x3, 0x100000001, 0x700000, 0x2, 0x1ff, 0xfffffffffffffff9, 0x9, 0x3, 0x6975, 0x6000, 0x7, r2, 0xee01, 0x0, 0x8}}, {0x1, 0x4, 0xc, 0x7fffffff, '/dev/random\x00'}}, {{0x4, 0x0, 0xd1, 0x7f, 0x1, 0x9, {0x0, 0x7fffffff, 0x7, 0x0, 0x1c8, 0x1, 0x5, 0xfffffff9, 0x20, 0x2000, 0x1, 0xee01, r3, 0xe0000, 0x101}}, {0x1, 0x3, 0x2, 0x200, '\r/'}}, {{0x0, 0x1, 0x1ac, 0x4, 0x5, 0x636, {0x6, 0x7fffffff, 0x8, 0x44c, 0x8, 0x2, 0x1, 0x1b, 0x3, 0x4000, 0x7, r4, 0xffffffffffffffff, 0x0, 0xffffffff}}, {0x3, 0x5, 0x1, 0x8, '['}}, {{0x1, 0x1, 0x7ff, 0x3baa, 0x40, 0x1, {0x2, 0x2, 0xd7, 0x8, 0xd479, 0x6d, 0x38ba, 0xffffff7f, 0x5, 0x6000, 0x4, 0xee01, r5, 0x9, 0x7ff}}, {0x6, 0x2, 0xc, 0x57d, '/dev/random\x00'}}, {{0x5, 0x2, 0x6, 0xfdda, 0x1881c9f0, 0x9bcf, {0x2, 0x440, 0x645, 0x6, 0x8, 0x0, 0x400, 0x7fff, 0xfffffffd, 0xc000, 0x20, r6, 0xee00, 0x58103b68, 0x4}}, {0x2, 0x5b, 0xc, 0x99, '/dev/random\x00'}}, {{0x0, 0x1, 0x46, 0x9, 0x4, 0x7, {0x0, 0x69, 0x748a, 0x2, 0x3, 0x7f, 0x9, 0x9, 0x8, 0x4000, 0x3, 0xffffffffffffffff, 0xee00, 0x322, 0x10000}}, {0x3, 0x4, 0xc, 0x2, '/dev/random\x00'}}, {{0x5, 0x1, 0xd77, 0x0, 0x7, 0x81, {0x2, 0x0, 0x1, 0x0, 0x8294, 0x1ff, 0x0, 0x5a, 0x2, 0xc000, 0x7, r7, 0x0, 0x7, 0xd7f}}, {0x1, 0x200, 0x0, 0x6}}]}, 0x670) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000100)=""/146) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x100000) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0xb5, 0x101200) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x80000001}) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x6, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000100)=""/146) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x100000000, 0x100000) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) 20:46:02 executing program 3: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25011dd53e62e4be9889c6f67b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0xc801}, 0x20000040) r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r1, r2, r3, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)={r4}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085204, 0x0) r6 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000380)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000180)={r2}) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f00000000c0), 0xb5, 0x101200) (async, rerun: 32) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/4) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x80000001}) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/37) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x6, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:02 executing program 3: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25011dd53e62e4be9889c6f67b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0xc801}, 0x20000040) r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r1, r2, r3, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)={r4}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085204, 0x0) r6 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000002c0)) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000380)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000180)={r2}) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x6, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000200)=[r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x2, 0x2e42, 0x2, 0xffffffffffffffff, 0x1, 0x7f, 0x2, 0x2, 0xffffffff], 0x8}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0xae, 0x50800) 20:46:02 executing program 3: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25011dd53e62e4be9889c6f67b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0xc801}, 0x20000040) r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r1, r2, r3, 0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)={r4}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085204, 0x0) r6 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000380)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000180)={r2}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25011dd53e62e4be9889c6f67b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0xc801}, 0x20000040) (async) syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, r1, r2, r3, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)={r4}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDENTROPY(r5, 0x40085204, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000380)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000180)={r2}) (async) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) (async) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0x9, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x1, 0xff}}}, 0x60) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) r7 = getuid() r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000002300)={0x2b, 0x4, 0x0, {0x2, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x800, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r5}}]}}) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r4, {{0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffffff}}}, 0x28) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0xae, 0x50800) 20:46:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x3, 0x0, {0x3, 0x1, 0x0, '$'}}, 0x22) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8dc1, 0x10102) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/139) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) 20:46:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) (async) 20:46:02 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0x9, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x1, 0xff}}}, 0x60) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) r7 = getuid() r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000002300)={0x2b, 0x4, 0x0, {0x2, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x800, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r5}}]}}) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r4, {{0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffffff}}}, 0x28) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0x9, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x1, 0xff}}}, 0x60) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) (async) getuid() (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000002300)={0x2b, 0x4, 0x0, {0x2, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) (async) mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x800, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r5}}]}}) (async) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r4, {{0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffffff}}}, 0x28) (async) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0xae, 0x50800) 20:46:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x3, 0x0, {0x3, 0x1, 0x0, '$'}}, 0x22) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8dc1, 0x10102) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/139) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x3, 0x0, {0x3, 0x1, 0x0, '$'}}, 0x22) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8dc1, 0x10102) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/139) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) (async) 20:46:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x64c2c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xbec, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffff8, 0x4, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0x9, 0x1, 0x6, 0x1, 0x4, 0xfffffff7, 0x1, 0xff}}}, 0x60) (async, rerun: 32) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) (async) r7 = getuid() (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000002300)={0x2b, 0x4, 0x0, {0x2, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x800, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r5}}]}}) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r4, {{0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffffff}}}, 0x28) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, r3, r4, r5, r6, r7, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x81, 0x2], 0xa, 0x1}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0xfffffffffffffff7}}, 0x18) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x2, 0x7fffffff, 0x5, 0xffff8477, 0x6, 0x100}) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x64c2c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xbec, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffff8, 0x4, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x64c2c2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xbec, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffff8, 0x4, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x3, 0x0, {0x3, 0x1, 0x0, '$'}}, 0x22) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8dc1, 0x10102) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000080)=""/139) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) 20:46:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, r3, r4, r5, r6, r7, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x81, 0x2], 0xa, 0x1}) (async) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0xfffffffffffffff7}}, 0x18) 20:46:03 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x161800, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fbfffff) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x2, 0x7fffffff, 0x5, 0xffff8477, 0x6, 0x100}) 20:46:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x90000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x10001, 0x9, 0xa9, 0x3, '\x00', '\x00', '\x00', 0x1, 0x5, 0x7, 0x4a, "3f0d12ec740d1e6c7b90ae6df5da2caf"}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) 20:46:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x64c2c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xbec, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffff8, 0x4, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x2, 0x7fffffff, 0x5, 0xffff8477, 0x6, 0x100}) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, r3, r4, r5, r6, r7, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x81, 0x2], 0xa, 0x1}) (async) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0xfffffffffffffff7}}, 0x18) 20:46:03 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x161800, 0x0) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fbfffff) 20:46:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x90000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x10001, 0x9, 0xa9, 0x3, '\x00', '\x00', '\x00', 0x1, 0x5, 0x7, 0x4a, "3f0d12ec740d1e6c7b90ae6df5da2caf"}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x90000) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x10001, 0x9, 0xa9, 0x3, '\x00', '\x00', '\x00', 0x1, 0x5, 0x7, 0x4a, "3f0d12ec740d1e6c7b90ae6df5da2caf"}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x377ad254, 0xffff, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 20:46:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10802) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x212400) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r2 = mq_open(&(0x7f0000000340)='/dev/input/event#\x00', 0x800, 0x21, &(0x7f00000001c0)={0xfffffffffffffffa, 0x2, 0x6, 0x3}) mq_timedreceive(r2, &(0x7f0000000300)=""/52, 0x34, 0x10001, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfff, 0x3}) 20:46:03 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x161800, 0x0) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fbfffff) 20:46:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x90000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x10001, 0x9, 0xa9, 0x3, '\x00', '\x00', '\x00', 0x1, 0x5, 0x7, 0x4a, "3f0d12ec740d1e6c7b90ae6df5da2caf"}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) 20:46:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10802) (async) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x212400) (async, rerun: 32) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) (async, rerun: 32) r2 = mq_open(&(0x7f0000000340)='/dev/input/event#\x00', 0x800, 0x21, &(0x7f00000001c0)={0xfffffffffffffffa, 0x2, 0x6, 0x3}) mq_timedreceive(r2, &(0x7f0000000300)=""/52, 0x34, 0x10001, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) (async, rerun: 32) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) (rerun: 32) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x377ad254, 0xffff, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 20:46:03 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfff, 0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfff, 0x3}) (async) 20:46:03 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x100000001, 0x8801) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r1}) 20:46:03 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10802) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x212400) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r2 = mq_open(&(0x7f0000000340)='/dev/input/event#\x00', 0x800, 0x21, &(0x7f00000001c0)={0xfffffffffffffffa, 0x2, 0x6, 0x3}) mq_timedreceive(r2, &(0x7f0000000300)=""/52, 0x34, 0x10001, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10802) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x212400) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) (async) mq_open(&(0x7f0000000340)='/dev/input/event#\x00', 0x800, 0x21, &(0x7f00000001c0)={0xfffffffffffffffa, 0x2, 0x6, 0x3}) (async) mq_timedreceive(r2, &(0x7f0000000300)=""/52, 0x34, 0x10001, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfff, 0x3}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfff, 0x3}) (async) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x377ad254, 0xffff, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 20:46:03 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x100000001, 0x8801) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x100000001, 0x8801) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r1}) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0xbb2e156cd8e8da4e}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r6, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7fffffff, 0xfffffffffffffffc], 0x3, 0x1}) 20:46:03 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x5, 0x3f, 0x87, '\x00', 0x1ff}, 0x0, [0x7, 0x7, 0x7fff, 0xb7b4, 0xa5, 0x9, 0xfffffffffffffff9, 0x4, 0xff, 0x0, 0x8, 0x7, 0x7, 0x3, 0x6, 0x8, 0x5, 0x0, 0x10000, 0x7f, 0x2, 0x3edc, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0xbf9, 0x8, 0x2, 0x4, 0x7fff, 0x77, 0xa7f, 0x6, 0x1f, 0xffffffffffffffff, 0x9, 0x4, 0x50, 0x5c, 0xffffffffffffffff, 0x2, 0x4, 0xffffffff, 0x80, 0x800, 0x5, 0x3, 0x1bfcc00000000000, 0xfffffffffffff001, 0xd12b, 0xfffffffffffffc01, 0xbf4, 0xfffffffffffffff7, 0x56d, 0x3a5, 0xea5, 0xffffffff, 0x8275, 0x838, 0x0, 0xffffffffffffff52, 0x52, 0x3, 0x2, 0x800, 0x0, 0x200, 0xe0, 0xff, 0x2, 0x4, 0x2, 0x7fff, 0x5f7f, 0xef0, 0x0, 0x1, 0x2, 0xa1, 0x7f, 0x7, 0x3f, 0x80, 0x6a, 0x8, 0x100000001, 0x3, 0x7, 0x1, 0x8000000000000000, 0x6, 0x6, 0x9, 0x6, 0xfffffffffffffc01, 0x7ff, 0x7, 0x1, 0x1, 0xfff, 0xe6, 0x2, 0x4a, 0x0, 0xffff, 0xc99, 0x6, 0x4, 0x3f, 0x4, 0x4, 0x5, 0x80000001, 0xff, 0x20, 0x800, 0x7fffffffffffffff, 0x5, 0x6, 0x2, 0x5, 0x3f, 0x554a00ea, 0x8, 0x0, 0x8000000000000001, 0x1ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x28, &(0x7f0000000000)="000096d05b2edb7a0e4f0cf2fc96bd12c3d207a60d0661399ed1dfa45015428585d74696c756ef07"}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1f, 0x202000) 20:46:03 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x100000001, 0x8801) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r1}) (async) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0xbb2e156cd8e8da4e}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r6, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7fffffff, 0xfffffffffffffffc], 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x40000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r5], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0xbb2e156cd8e8da4e}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r6, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7fffffff, 0xfffffffffffffffc], 0x3, 0x1}) (async) 20:46:03 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x28, &(0x7f0000000000)="000096d05b2edb7a0e4f0cf2fc96bd12c3d207a60d0661399ed1dfa45015428585d74696c756ef07"}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1f, 0x202000) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x5, 0x3f, 0x87, '\x00', 0x1ff}, 0x0, [0x7, 0x7, 0x7fff, 0xb7b4, 0xa5, 0x9, 0xfffffffffffffff9, 0x4, 0xff, 0x0, 0x8, 0x7, 0x7, 0x3, 0x6, 0x8, 0x5, 0x0, 0x10000, 0x7f, 0x2, 0x3edc, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0xbf9, 0x8, 0x2, 0x4, 0x7fff, 0x77, 0xa7f, 0x6, 0x1f, 0xffffffffffffffff, 0x9, 0x4, 0x50, 0x5c, 0xffffffffffffffff, 0x2, 0x4, 0xffffffff, 0x80, 0x800, 0x5, 0x3, 0x1bfcc00000000000, 0xfffffffffffff001, 0xd12b, 0xfffffffffffffc01, 0xbf4, 0xfffffffffffffff7, 0x56d, 0x3a5, 0xea5, 0xffffffff, 0x8275, 0x838, 0x0, 0xffffffffffffff52, 0x52, 0x3, 0x2, 0x800, 0x0, 0x200, 0xe0, 0xff, 0x2, 0x4, 0x2, 0x7fff, 0x5f7f, 0xef0, 0x0, 0x1, 0x2, 0xa1, 0x7f, 0x7, 0x3f, 0x80, 0x6a, 0x8, 0x100000001, 0x3, 0x7, 0x1, 0x8000000000000000, 0x6, 0x6, 0x9, 0x6, 0xfffffffffffffc01, 0x7ff, 0x7, 0x1, 0x1, 0xfff, 0xe6, 0x2, 0x4a, 0x0, 0xffff, 0xc99, 0x6, 0x4, 0x3f, 0x4, 0x4, 0x5, 0x80000001, 0xff, 0x20, 0x800, 0x7fffffffffffffff, 0x5, 0x6, 0x2, 0x5, 0x3f, 0x554a00ea, 0x8, 0x0, 0x8000000000000001, 0x1ff]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:03 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x6, 0x4) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffc0, 0x541040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/4096) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x28, &(0x7f0000000000)="000096d05b2edb7a0e4f0cf2fc96bd12c3d207a60d0661399ed1dfa45015428585d74696c756ef07"}) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1f, 0x202000) 20:46:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0xbb2e156cd8e8da4e}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r6, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7fffffff, 0xfffffffffffffffc], 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x4080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000280), 0x1f, 0x40000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000002c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[r5], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0xbb2e156cd8e8da4e}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r6, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7fffffff, 0xfffffffffffffffc], 0x3, 0x1}) (async) 20:46:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x5, 0x3f, 0x87, '\x00', 0x1ff}, 0x0, [0x7, 0x7, 0x7fff, 0xb7b4, 0xa5, 0x9, 0xfffffffffffffff9, 0x4, 0xff, 0x0, 0x8, 0x7, 0x7, 0x3, 0x6, 0x8, 0x5, 0x0, 0x10000, 0x7f, 0x2, 0x3edc, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0xbf9, 0x8, 0x2, 0x4, 0x7fff, 0x77, 0xa7f, 0x6, 0x1f, 0xffffffffffffffff, 0x9, 0x4, 0x50, 0x5c, 0xffffffffffffffff, 0x2, 0x4, 0xffffffff, 0x80, 0x800, 0x5, 0x3, 0x1bfcc00000000000, 0xfffffffffffff001, 0xd12b, 0xfffffffffffffc01, 0xbf4, 0xfffffffffffffff7, 0x56d, 0x3a5, 0xea5, 0xffffffff, 0x8275, 0x838, 0x0, 0xffffffffffffff52, 0x52, 0x3, 0x2, 0x800, 0x0, 0x200, 0xe0, 0xff, 0x2, 0x4, 0x2, 0x7fff, 0x5f7f, 0xef0, 0x0, 0x1, 0x2, 0xa1, 0x7f, 0x7, 0x3f, 0x80, 0x6a, 0x8, 0x100000001, 0x3, 0x7, 0x1, 0x8000000000000000, 0x6, 0x6, 0x9, 0x6, 0xfffffffffffffc01, 0x7ff, 0x7, 0x1, 0x1, 0xfff, 0xe6, 0x2, 0x4a, 0x0, 0xffff, 0xc99, 0x6, 0x4, 0x3f, 0x4, 0x4, 0x5, 0x80000001, 0xff, 0x20, 0x800, 0x7fffffffffffffff, 0x5, 0x6, 0x2, 0x5, 0x3f, 0x554a00ea, 0x8, 0x0, 0x8000000000000001, 0x1ff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x5, 0x3f, 0x87, '\x00', 0x1ff}, 0x0, [0x7, 0x7, 0x7fff, 0xb7b4, 0xa5, 0x9, 0xfffffffffffffff9, 0x4, 0xff, 0x0, 0x8, 0x7, 0x7, 0x3, 0x6, 0x8, 0x5, 0x0, 0x10000, 0x7f, 0x2, 0x3edc, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0xbf9, 0x8, 0x2, 0x4, 0x7fff, 0x77, 0xa7f, 0x6, 0x1f, 0xffffffffffffffff, 0x9, 0x4, 0x50, 0x5c, 0xffffffffffffffff, 0x2, 0x4, 0xffffffff, 0x80, 0x800, 0x5, 0x3, 0x1bfcc00000000000, 0xfffffffffffff001, 0xd12b, 0xfffffffffffffc01, 0xbf4, 0xfffffffffffffff7, 0x56d, 0x3a5, 0xea5, 0xffffffff, 0x8275, 0x838, 0x0, 0xffffffffffffff52, 0x52, 0x3, 0x2, 0x800, 0x0, 0x200, 0xe0, 0xff, 0x2, 0x4, 0x2, 0x7fff, 0x5f7f, 0xef0, 0x0, 0x1, 0x2, 0xa1, 0x7f, 0x7, 0x3f, 0x80, 0x6a, 0x8, 0x100000001, 0x3, 0x7, 0x1, 0x8000000000000000, 0x6, 0x6, 0x9, 0x6, 0xfffffffffffffc01, 0x7ff, 0x7, 0x1, 0x1, 0xfff, 0xe6, 0x2, 0x4a, 0x0, 0xffff, 0xc99, 0x6, 0x4, 0x3f, 0x4, 0x4, 0x5, 0x80000001, 0xff, 0x20, 0x800, 0x7fffffffffffffff, 0x5, 0x6, 0x2, 0x5, 0x3f, 0x554a00ea, 0x8, 0x0, 0x8000000000000001, 0x1ff]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:03 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 20:46:04 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:04 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffc0, 0x541040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/4096) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x200) (async) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffc0, 0x541040) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/4096) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x3c8882) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:04 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = eventfd(0x7) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x4, 0x8, 0x9, 0x5, 0x1], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:04 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x6, 0x4) (rerun: 32) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:04 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x200) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffc0, 0x541040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/4096) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = eventfd(0x7) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x4, 0x8, 0x9, 0x5, 0x1], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x3c8882) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x3c8882) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:04 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:04 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) 20:46:04 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = eventfd(0x7) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x4, 0x8, 0x9, 0x5, 0x1], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x3c8882) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:04 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x606, 0x2, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x0, 0xa}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = geteuid() r7 = getegid() read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000021c0)=0x0) r11 = geteuid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000002200)={0x470, 0x0, 0x0, [{{0x0, 0x0, 0x4, 0x2, 0x8000, 0x10001, {0x4, 0x6, 0x8000, 0x7, 0x7fffffff, 0x40, 0x100000, 0x0, 0x5, 0x6000, 0x200, r6, r4, 0x1, 0xf78}}, {0x5, 0xfff, 0x0, 0x6}}, {{0x1, 0x1, 0x8, 0xffff, 0x800, 0xff, {0x4, 0x5, 0xe8, 0x4, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x1000, 0x82, r3, r4, 0xbcf, 0xfff}}, {0x1, 0x2, 0x1, 0xffff8001, '['}}, {{0x1, 0x2, 0x96, 0x9d86, 0x4, 0x10000, {0x2, 0x800, 0xfffffffffffffffa, 0x0, 0xc33, 0x5b69c187, 0x7, 0x7f9, 0x1, 0x2000, 0xffffffe1, r3, r7, 0x6, 0x800}}, {0x2, 0xffff, 0x1, 0x8, '['}}, {{0x4, 0x2, 0x9, 0x7ff, 0x5, 0x6, {0x0, 0x7, 0x7, 0x9, 0x80, 0x10000, 0x56, 0xa0000000, 0xc2b9, 0xc000, 0x0, r3, r9, 0x6, 0xda6d}}, {0x5, 0x7, 0x4, 0x1914, ']//-'}}, {{0x4, 0x3, 0x8000000000000001, 0xac10, 0xfffffffb, 0xbf9, {0x3, 0x4, 0x80000000, 0x40d, 0x9, 0x1, 0x8f, 0x14, 0x9, 0x0, 0x0, 0xee01, r10, 0x8, 0x81}}, {0x5, 0x0, 0x5, 0xffffffff, '-!0/]'}}, {{0x800000000004, 0x0, 0x4, 0xffffffffffffffff, 0x10001, 0x1, {0x3, 0x8, 0x9, 0x1, 0x8, 0x3f, 0x80, 0x5, 0x1, 0x6000, 0x7, r3, r4, 0x5, 0x7fffffff}}, {0x3, 0x3, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x0, 0x0, 0x4, 0x5, {0x1, 0x1, 0x7fffffff, 0x22, 0xffffffff, 0x8, 0x7, 0x1, 0xffffffbf, 0xa000, 0xffffff3d, r11, r4, 0x2}}, {0x1, 0x100000000, 0x2, 0x3f, '\xec@'}}]}, 0x470) read$FUSE(r1, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000002680)={0x28, 0xfffffffffffffff5, r8, {{0x3, 0x1, 0x1, r12}}}, 0x28) 20:46:04 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/97) syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x100) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 20:46:04 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x606, 0x2, 0x101, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x606, 0x2, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:04 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$can_raw(0x1d, 0x3, 0x1) 20:46:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x210400) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:04 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x0, 0xa}}, 0x20) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = geteuid() (async) r7 = getegid() (async) read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000021c0)=0x0) (async) r11 = geteuid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000002200)={0x470, 0x0, 0x0, [{{0x0, 0x0, 0x4, 0x2, 0x8000, 0x10001, {0x4, 0x6, 0x8000, 0x7, 0x7fffffff, 0x40, 0x100000, 0x0, 0x5, 0x6000, 0x200, r6, r4, 0x1, 0xf78}}, {0x5, 0xfff, 0x0, 0x6}}, {{0x1, 0x1, 0x8, 0xffff, 0x800, 0xff, {0x4, 0x5, 0xe8, 0x4, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x1000, 0x82, r3, r4, 0xbcf, 0xfff}}, {0x1, 0x2, 0x1, 0xffff8001, '['}}, {{0x1, 0x2, 0x96, 0x9d86, 0x4, 0x10000, {0x2, 0x800, 0xfffffffffffffffa, 0x0, 0xc33, 0x5b69c187, 0x7, 0x7f9, 0x1, 0x2000, 0xffffffe1, r3, r7, 0x6, 0x800}}, {0x2, 0xffff, 0x1, 0x8, '['}}, {{0x4, 0x2, 0x9, 0x7ff, 0x5, 0x6, {0x0, 0x7, 0x7, 0x9, 0x80, 0x10000, 0x56, 0xa0000000, 0xc2b9, 0xc000, 0x0, r3, r9, 0x6, 0xda6d}}, {0x5, 0x7, 0x4, 0x1914, ']//-'}}, {{0x4, 0x3, 0x8000000000000001, 0xac10, 0xfffffffb, 0xbf9, {0x3, 0x4, 0x80000000, 0x40d, 0x9, 0x1, 0x8f, 0x14, 0x9, 0x0, 0x0, 0xee01, r10, 0x8, 0x81}}, {0x5, 0x0, 0x5, 0xffffffff, '-!0/]'}}, {{0x800000000004, 0x0, 0x4, 0xffffffffffffffff, 0x10001, 0x1, {0x3, 0x8, 0x9, 0x1, 0x8, 0x3f, 0x80, 0x5, 0x1, 0x6000, 0x7, r3, r4, 0x5, 0x7fffffff}}, {0x3, 0x3, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x0, 0x0, 0x4, 0x5, {0x1, 0x1, 0x7fffffff, 0x22, 0xffffffff, 0x8, 0x7, 0x1, 0xffffffbf, 0xa000, 0xffffff3d, r11, r4, 0x2}}, {0x1, 0x100000000, 0x2, 0x3f, '\xec@'}}]}, 0x470) (async) read$FUSE(r1, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000002680)={0x28, 0xfffffffffffffff5, r8, {{0x3, 0x1, 0x1, r12}}}, 0x28) 20:46:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xd508, 0x5e8bfde9, 0x40000ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80000001, 0x80000001, 0xd53}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/93, 0x5d, 0x10020, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) 20:46:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:05 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$can_raw(0x1d, 0x3, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) 20:46:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000080000000000000002000000e85c6789dfa93c14d6307ba32ff29b88c805ce9ee36eb436a05fa8e148841000"/63]) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) write$vhost_msg(r2, &(0x7f0000001240)={0x1, {&(0x7f0000000140)=""/226, 0xe2, &(0x7f00000013c0)=""/4101, 0x1, 0x4}}, 0x48) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x68a5) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) 20:46:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xd508, 0x5e8bfde9, 0x40000ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80000001, 0x80000001, 0xd53}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/93, 0x5d, 0x10020, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) 20:46:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x0, 0xa}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = geteuid() r7 = getegid() read$FUSE(r1, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000021c0)=0x0) r11 = geteuid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000002200)={0x470, 0x0, 0x0, [{{0x0, 0x0, 0x4, 0x2, 0x8000, 0x10001, {0x4, 0x6, 0x8000, 0x7, 0x7fffffff, 0x40, 0x100000, 0x0, 0x5, 0x6000, 0x200, r6, r4, 0x1, 0xf78}}, {0x5, 0xfff, 0x0, 0x6}}, {{0x1, 0x1, 0x8, 0xffff, 0x800, 0xff, {0x4, 0x5, 0xe8, 0x4, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x1000, 0x82, r3, r4, 0xbcf, 0xfff}}, {0x1, 0x2, 0x1, 0xffff8001, '['}}, {{0x1, 0x2, 0x96, 0x9d86, 0x4, 0x10000, {0x2, 0x800, 0xfffffffffffffffa, 0x0, 0xc33, 0x5b69c187, 0x7, 0x7f9, 0x1, 0x2000, 0xffffffe1, r3, r7, 0x6, 0x800}}, {0x2, 0xffff, 0x1, 0x8, '['}}, {{0x4, 0x2, 0x9, 0x7ff, 0x5, 0x6, {0x0, 0x7, 0x7, 0x9, 0x80, 0x10000, 0x56, 0xa0000000, 0xc2b9, 0xc000, 0x0, r3, r9, 0x6, 0xda6d}}, {0x5, 0x7, 0x4, 0x1914, ']//-'}}, {{0x4, 0x3, 0x8000000000000001, 0xac10, 0xfffffffb, 0xbf9, {0x3, 0x4, 0x80000000, 0x40d, 0x9, 0x1, 0x8f, 0x14, 0x9, 0x0, 0x0, 0xee01, r10, 0x8, 0x81}}, {0x5, 0x0, 0x5, 0xffffffff, '-!0/]'}}, {{0x800000000004, 0x0, 0x4, 0xffffffffffffffff, 0x10001, 0x1, {0x3, 0x8, 0x9, 0x1, 0x8, 0x3f, 0x80, 0x5, 0x1, 0x6000, 0x7, r3, r4, 0x5, 0x7fffffff}}, {0x3, 0x3, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x0, 0x0, 0x4, 0x5, {0x1, 0x1, 0x7fffffff, 0x22, 0xffffffff, 0x8, 0x7, 0x1, 0xffffffbf, 0xa000, 0xffffff3d, r11, r4, 0x2}}, {0x1, 0x100000000, 0x2, 0x3f, '\xec@'}}]}, 0x470) read$FUSE(r1, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000002680)={0x28, 0xfffffffffffffff5, r8, {{0x3, 0x1, 0x1, r12}}}, 0x28) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2, {0x0, 0xa}}, 0x20) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) geteuid() (async) getegid() (async) read$FUSE(r1, &(0x7f0000002840)={0x2020}, 0x2020) (async) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000021c0)) (async) geteuid() (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002200)={0x470, 0x0, 0x0, [{{0x0, 0x0, 0x4, 0x2, 0x8000, 0x10001, {0x4, 0x6, 0x8000, 0x7, 0x7fffffff, 0x40, 0x100000, 0x0, 0x5, 0x6000, 0x200, r6, r4, 0x1, 0xf78}}, {0x5, 0xfff, 0x0, 0x6}}, {{0x1, 0x1, 0x8, 0xffff, 0x800, 0xff, {0x4, 0x5, 0xe8, 0x4, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x1000, 0x82, r3, r4, 0xbcf, 0xfff}}, {0x1, 0x2, 0x1, 0xffff8001, '['}}, {{0x1, 0x2, 0x96, 0x9d86, 0x4, 0x10000, {0x2, 0x800, 0xfffffffffffffffa, 0x0, 0xc33, 0x5b69c187, 0x7, 0x7f9, 0x1, 0x2000, 0xffffffe1, r3, r7, 0x6, 0x800}}, {0x2, 0xffff, 0x1, 0x8, '['}}, {{0x4, 0x2, 0x9, 0x7ff, 0x5, 0x6, {0x0, 0x7, 0x7, 0x9, 0x80, 0x10000, 0x56, 0xa0000000, 0xc2b9, 0xc000, 0x0, r3, r9, 0x6, 0xda6d}}, {0x5, 0x7, 0x4, 0x1914, ']//-'}}, {{0x4, 0x3, 0x8000000000000001, 0xac10, 0xfffffffb, 0xbf9, {0x3, 0x4, 0x80000000, 0x40d, 0x9, 0x1, 0x8f, 0x14, 0x9, 0x0, 0x0, 0xee01, r10, 0x8, 0x81}}, {0x5, 0x0, 0x5, 0xffffffff, '-!0/]'}}, {{0x800000000004, 0x0, 0x4, 0xffffffffffffffff, 0x10001, 0x1, {0x3, 0x8, 0x9, 0x1, 0x8, 0x3f, 0x80, 0x5, 0x1, 0x6000, 0x7, r3, r4, 0x5, 0x7fffffff}}, {0x3, 0x3, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x0, 0x0, 0x4, 0x5, {0x1, 0x1, 0x7fffffff, 0x22, 0xffffffff, 0x8, 0x7, 0x1, 0xffffffbf, 0xa000, 0xffffff3d, r11, r4, 0x2}}, {0x1, 0x100000000, 0x2, 0x3f, '\xec@'}}]}, 0x470) (async) read$FUSE(r1, &(0x7f0000004880)={0x2020}, 0x2020) (async) write$FUSE_LK(r5, &(0x7f0000002680)={0x28, 0xfffffffffffffff5, r8, {{0x3, 0x1, 0x1, r12}}}, 0x28) (async) 20:46:05 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) socket$can_raw(0x1d, 0x3, 0x1) 20:46:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000080000000000000002000000e85c6789dfa93c14d6307ba32ff29b88c805ce9ee36eb436a05fa8e148841000"/63]) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) (async) write$vhost_msg(r2, &(0x7f0000001240)={0x1, {&(0x7f0000000140)=""/226, 0xe2, &(0x7f00000013c0)=""/4101, 0x1, 0x4}}, 0x48) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x68a5) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) 20:46:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000080000000000000002000000e85c6789dfa93c14d6307ba32ff29b88c805ce9ee36eb436a05fa8e148841000"/63]) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) write$vhost_msg(r2, &(0x7f0000001240)={0x1, {&(0x7f0000000140)=""/226, 0xe2, &(0x7f00000013c0)=""/4101, 0x1, 0x4}}, 0x48) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x68a5) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) 20:46:05 executing program 0: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fffffff) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000002240)=""/216, 0x26, 0xd8, 0x1}, 0x20) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x138, 0x7fffffffffffffed, r1, [{0x1, 0x8000000000000001, 0x9, 0x4, ':\'^\x87\\-\\&{'}, {0x4, 0x5, 0x3, 0x7, '&(&'}, {0x3, 0x581, 0xc, 0x10001, '/dev/random\x00'}, {0x1, 0x9, 0xc, 0x2, '/dev/random\x00'}, {0x0, 0x80, 0x0, 0x3}, {0x8, 0x1, 0xe, 0x8, '[*,^{!:--$/.@]'}, {0x3, 0x2, 0xc, 0x3, '/dev/random\x00'}, {0x1, 0x0, 0xc, 0x2000, '/dev/random\x00'}]}, 0x138) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000023c0)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '\x0f]'}}, 0x23) write$FUSE_DIRENT(r2, &(0x7f0000002380)={0x38, 0x0, r4, [{0x2, 0x6, 0xc, 0x6, '/dev/random\x00'}]}, 0x38) 20:46:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xd508, 0x5e8bfde9, 0x40000ff, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x80000001, 0x80000001, 0xd53}) (async) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/93, 0x5d, 0x10020, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) 20:46:05 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:05 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x20) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x228201) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:05 executing program 0: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000002240)=""/216, 0x26, 0xd8, 0x1}, 0x20) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x138, 0x7fffffffffffffed, r1, [{0x1, 0x8000000000000001, 0x9, 0x4, ':\'^\x87\\-\\&{'}, {0x4, 0x5, 0x3, 0x7, '&(&'}, {0x3, 0x581, 0xc, 0x10001, '/dev/random\x00'}, {0x1, 0x9, 0xc, 0x2, '/dev/random\x00'}, {0x0, 0x80, 0x0, 0x3}, {0x8, 0x1, 0xe, 0x8, '[*,^{!:--$/.@]'}, {0x3, 0x2, 0xc, 0x3, '/dev/random\x00'}, {0x1, 0x0, 0xc, 0x2000, '/dev/random\x00'}]}, 0x138) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) (async) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000023c0)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '\x0f]'}}, 0x23) (async) write$FUSE_DIRENT(r2, &(0x7f0000002380)={0x38, 0x0, r4, [{0x2, 0x6, 0xc, 0x6, '/dev/random\x00'}]}, 0x38) 20:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/75) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:05 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:05 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x20) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x228201) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (rerun: 64) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/75) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:05 executing program 0: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fffffff) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000002240)=""/216, 0x26, 0xd8, 0x1}, 0x20) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x138, 0x7fffffffffffffed, r1, [{0x1, 0x8000000000000001, 0x9, 0x4, ':\'^\x87\\-\\&{'}, {0x4, 0x5, 0x3, 0x7, '&(&'}, {0x3, 0x581, 0xc, 0x10001, '/dev/random\x00'}, {0x1, 0x9, 0xc, 0x2, '/dev/random\x00'}, {0x0, 0x80, 0x0, 0x3}, {0x8, 0x1, 0xe, 0x8, '[*,^{!:--$/.@]'}, {0x3, 0x2, 0xc, 0x3, '/dev/random\x00'}, {0x1, 0x0, 0xc, 0x2000, '/dev/random\x00'}]}, 0x138) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000023c0)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '\x0f]'}}, 0x23) write$FUSE_DIRENT(r2, &(0x7f0000002380)={0x38, 0x0, r4, [{0x2, 0x6, 0xc, 0x6, '/dev/random\x00'}]}, 0x38) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000002240)=""/216, 0x26, 0xd8, 0x1}, 0x20) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r0, &(0x7f0000002100)={0x138, 0x7fffffffffffffed, r1, [{0x1, 0x8000000000000001, 0x9, 0x4, ':\'^\x87\\-\\&{'}, {0x4, 0x5, 0x3, 0x7, '&(&'}, {0x3, 0x581, 0xc, 0x10001, '/dev/random\x00'}, {0x1, 0x9, 0xc, 0x2, '/dev/random\x00'}, {0x0, 0x80, 0x0, 0x3}, {0x8, 0x1, 0xe, 0x8, '[*,^{!:--$/.@]'}, {0x3, 0x2, 0xc, 0x3, '/dev/random\x00'}, {0x1, 0x0, 0xc, 0x2000, '/dev/random\x00'}]}, 0x138) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r3, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r4}, 0x18) (async) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000023c0)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '\x0f]'}}, 0x23) (async) write$FUSE_DIRENT(r2, &(0x7f0000002380)={0x38, 0x0, r4, [{0x2, 0x6, 0xc, 0x6, '/dev/random\x00'}]}, 0x38) (async) 20:46:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:06 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x200, 0x4002c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4], 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r6], &(0x7f0000000240)=[0x196, 0x2, 0x0, 0x6d7, 0x400], 0x1, 0x3e019af0f5b48f94}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1d3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r8, 0x0], &(0x7f0000000100)=[0xc289, 0x6a97, 0xac, 0x400, 0x0, 0x800], 0x3, 0x1}) 20:46:06 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x20) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x228201) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x20) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x228201) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/75) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x200, 0x4002c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4], 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r6], &(0x7f0000000240)=[0x196, 0x2, 0x0, 0x6d7, 0x400], 0x1, 0x3e019af0f5b48f94}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1d3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r8, 0x0], &(0x7f0000000100)=[0xc289, 0x6a97, 0xac, 0x400, 0x0, 0x800], 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x200, 0x4002c1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4], 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r6], &(0x7f0000000240)=[0x196, 0x2, 0x0, 0x6d7, 0x400], 0x1, 0x3e019af0f5b48f94}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1d3, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r8, 0x0], &(0x7f0000000100)=[0xc289, 0x6a97, 0xac, 0x400, 0x0, 0x800], 0x3, 0x1}) (async) 20:46:06 executing program 0: mq_open(&(0x7f0000000100), 0x800, 0x20, &(0x7f0000000140)={0x9, 0x7fffffffffffffff, 0x0, 0x8}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x80000001}}, 0x18) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000180)=""/138, &(0x7f0000000100)=0x8a) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 20:46:06 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x183140) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r1, &(0x7f0000000000)="26d7bd8aec8ea1e2a1074021a5bedf4cdc4b4b139936f1d9ae31fe904dffe0104263828718263342f21f52d54bdf58dd2e16522d7e9c29bbb8a5d818d53200691e75c25f24459bb47c9b5a16a5256b1bf34259a2f8822f34cffc3d95830b69336fd9880c3d06c005d6d6fcd0c418cae8839c341296fa1ac1b54477f3c1360d90faa6934c7139246a2004dbcdb9727e7359e47867947899fa", 0x98, 0xd3018ce, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:06 executing program 0: mq_open(&(0x7f0000000100), 0x800, 0x20, &(0x7f0000000140)={0x9, 0x7fffffffffffffff, 0x0, 0x8}) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x80000001}}, 0x18) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000180)=""/138, &(0x7f0000000100)=0x8a) (async, rerun: 64) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (rerun: 64) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6cb1, 0x280080) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/217) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/39) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz1\x00'}) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x200, 0x4002c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, r3, r4], 0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r6], &(0x7f0000000240)=[0x196, 0x2, 0x0, 0x6d7, 0x400], 0x1, 0x3e019af0f5b48f94}) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1d3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, r8, 0x0], &(0x7f0000000100)=[0xc289, 0x6a97, 0xac, 0x400, 0x0, 0x800], 0x3, 0x1}) 20:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x183140) (async) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) (async, rerun: 32) mq_timedsend(r1, &(0x7f0000000000)="26d7bd8aec8ea1e2a1074021a5bedf4cdc4b4b139936f1d9ae31fe904dffe0104263828718263342f21f52d54bdf58dd2e16522d7e9c29bbb8a5d818d53200691e75c25f24459bb47c9b5a16a5256b1bf34259a2f8822f34cffc3d95830b69336fd9880c3d06c005d6d6fcd0c418cae8839c341296fa1ac1b54477f3c1360d90faa6934c7139246a2004dbcdb9727e7359e47867947899fa", 0x98, 0xd3018ce, &(0x7f00000000c0)={0x0, 0x989680}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6cb1, 0x280080) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/217) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/39) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x6cb1, 0x280080) (async) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/217) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/39) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz1\x00'}) (async) 20:46:06 executing program 0: mq_open(&(0x7f0000000100), 0x800, 0x20, &(0x7f0000000140)={0x9, 0x7fffffffffffffff, 0x0, 0x8}) (async) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x80000001}}, 0x18) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000180)=""/138, &(0x7f0000000100)=0x8a) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xfffffffffffffffc, 0x183140) (async) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r1, &(0x7f0000000000)="26d7bd8aec8ea1e2a1074021a5bedf4cdc4b4b139936f1d9ae31fe904dffe0104263828718263342f21f52d54bdf58dd2e16522d7e9c29bbb8a5d818d53200691e75c25f24459bb47c9b5a16a5256b1bf34259a2f8822f34cffc3d95830b69336fd9880c3d06c005d6d6fcd0c418cae8839c341296fa1ac1b54477f3c1360d90faa6934c7139246a2004dbcdb9727e7359e47867947899fa", 0x98, 0xd3018ce, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x204700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7a62, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, 0x0, 0x25, 0x28}, 0x10) 20:46:06 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6cb1, 0x280080) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000180)=""/217) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/39) (async, rerun: 64) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (rerun: 64) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz1\x00'}) 20:46:06 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, 0x0, 0x220, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c}, 0x4) r1 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x2, 0x2, 0x1, 0x800, 0xef, 0x8, {0x2, 0x2, 0x8000, 0x7, 0x21, 0xc7c0, 0x9, 0x3, 0x4, 0xa000, 0x4, r1, r2, 0x4, 0x3}}}, 0x90) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xff, 0x204000) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x1fffffffc, &(0x7f0000001200)={r3, r4+60000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x21, 0x4, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000180)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x336c76e7244a1a30}, 0x4015) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x204700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7a62, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, 0x0, 0x25, 0x28}, 0x10) 20:46:06 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) (async) 20:46:06 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xffffff0f, &(0x7f0000000040)="c810"}) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xff, 0x204000) (async) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x1fffffffc, &(0x7f0000001200)={r3, r4+60000000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x21, 0x4, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000180)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) 20:46:06 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, 0x0, 0x220, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c}, 0x4) (async) r1 = geteuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x2, 0x2, 0x1, 0x800, 0xef, 0x8, {0x2, 0x2, 0x8000, 0x7, 0x21, 0xc7c0, 0x9, 0x3, 0x4, 0xa000, 0x4, r1, r2, 0x4, 0x3}}}, 0x90) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x336c76e7244a1a30}, 0x4015) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x336c76e7244a1a30}, 0x4015) (async) 20:46:06 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200041, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x2) (async) 20:46:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x204700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x7a62, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30) (async, rerun: 32) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, 0x0, 0x25, 0x28}, 0x10) 20:46:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xff, 0x204000) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x1fffffffc, &(0x7f0000001200)={r3, r4+60000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x21, 0x4, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000180)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xff, 0x204000) (async) clock_gettime(0x0, &(0x7f00000011c0)) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x1fffffffc, &(0x7f0000001200)={r3, r4+60000000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x21, 0x4, 0x400}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) (async) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000180)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) (async) 20:46:06 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, 0x0, 0x220, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c}, 0x4) (async) r1 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x2, 0x2, 0x1, 0x800, 0xef, 0x8, {0x2, 0x2, 0x8000, 0x7, 0x21, 0xc7c0, 0x9, 0x3, 0x4, 0xa000, 0x4, r1, r2, 0x4, 0x3}}}, 0x90) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 20:46:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x336c76e7244a1a30}, 0x4015) 20:46:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/234, 0xea}], 0x9}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:06 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x25, 0x0, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) 20:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 20:46:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:07 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async, rerun: 32) r1 = socket(0x25, 0x0, 0x4) (rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) (rerun: 32) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) (async) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) (async, rerun: 32) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) (async, rerun: 32) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) 20:46:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) 20:46:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:07 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x25, 0x0, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) socket(0x25, 0x0, 0x4) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) (async) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) (async) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) (async) 20:46:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/234, 0xea}], 0x9}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/234, 0xea}], 0x9}, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) 20:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={r3}) 20:46:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x720, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x48004) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/180) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000400)=""/231) 20:46:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) 20:46:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={r3}) (async) 20:46:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x720, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x48004) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x720, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x48004) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) 20:46:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x720, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x48004) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) 20:46:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={r3}) 20:46:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async, rerun: 32) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (rerun: 32) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000240)=""/169) (async, rerun: 32) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/180) (async, rerun: 32) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000400)=""/231) 20:46:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x400000) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/234, 0xea}], 0x9}, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/180) (async) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000400)=""/231) 20:46:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) 20:46:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) 20:46:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x400000) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x400) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:08 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)="c8"}) 20:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000000, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x6, 0x2, 0x7f8, 0x1, 'syz1\x00'}, 0x1, [0x800, 0xfffffffffffffffb, 0xd2e, 0xd22, 0x7, 0xf49b, 0x5f4065e, 0x100, 0x2, 0x1, 0xb50, 0xddb, 0xffffffff, 0x2, 0x6, 0xffff, 0x9, 0x0, 0xdd, 0x0, 0x7fffffff, 0x7fff, 0x20, 0xff, 0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x101, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x1, 0xe450, 0x2, 0x2, 0xc5, 0x5, 0xa32e, 0x8001, 0xfffffffffffffff8, 0x7, 0x400, 0x401, 0x1, 0x850, 0x3, 0x1, 0x8, 0x8, 0x8, 0x6, 0xff, 0x2, 0x20, 0x5, 0x7, 0xe65, 0x9, 0x81, 0x2, 0x3, 0x1e33, 0x3, 0x7fff, 0xc58, 0x10000, 0xfffffffffffffff7, 0x4, 0x8e, 0x6, 0x7, 0x401, 0x40, 0x9, 0xff, 0x5, 0x101, 0x4, 0x0, 0xbad, 0x20, 0x9, 0x100000000, 0x8ba5, 0x2, 0xb11, 0x8000, 0x0, 0x837, 0xfffffffffffffff9, 0x3, 0x3, 0x3f, 0x6, 0x7f, 0x5, 0x9, 0x6, 0x4, 0x1, 0x100000001, 0x1f, 0x686b, 0x1, 0x2, 0x9, 0x0, 0x9d, 0x38000000000000, 0x2, 0x8, 0x2, 0x8, 0x2, 0x4, 0x80000001, 0x5, 0x0, 0x6, 0x8000, 0x7, 0xd961, 0x1, 0x5]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xffffff81) 20:46:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) 20:46:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x8000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/189) 20:46:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)="c8"}) 20:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async) 20:46:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)="c8"}) 20:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x8000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/189) 20:46:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002140)={{0x8, 0x5, 0x8, 0xf954, '\x00', 0x4}, 0x0, 0x20, 0xe524, r1, 0x9, 0x40, 'syz1\x00', &(0x7f00000020c0)=['/dev/\x00\x00\x00\x00\x00\x00\x00', '/dev/random\x00', '(}$.:[}$l+.\x00', '/dev/random\x00', '/dev/random\x00', '/dev/random\x00', '(@%*(\x00', '/dev/random\x00', '\x00'], 0x5b}) 20:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000000, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x6, 0x2, 0x7f8, 0x1, 'syz1\x00'}, 0x1, [0x800, 0xfffffffffffffffb, 0xd2e, 0xd22, 0x7, 0xf49b, 0x5f4065e, 0x100, 0x2, 0x1, 0xb50, 0xddb, 0xffffffff, 0x2, 0x6, 0xffff, 0x9, 0x0, 0xdd, 0x0, 0x7fffffff, 0x7fff, 0x20, 0xff, 0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x101, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x1, 0xe450, 0x2, 0x2, 0xc5, 0x5, 0xa32e, 0x8001, 0xfffffffffffffff8, 0x7, 0x400, 0x401, 0x1, 0x850, 0x3, 0x1, 0x8, 0x8, 0x8, 0x6, 0xff, 0x2, 0x20, 0x5, 0x7, 0xe65, 0x9, 0x81, 0x2, 0x3, 0x1e33, 0x3, 0x7fff, 0xc58, 0x10000, 0xfffffffffffffff7, 0x4, 0x8e, 0x6, 0x7, 0x401, 0x40, 0x9, 0xff, 0x5, 0x101, 0x4, 0x0, 0xbad, 0x20, 0x9, 0x100000000, 0x8ba5, 0x2, 0xb11, 0x8000, 0x0, 0x837, 0xfffffffffffffff9, 0x3, 0x3, 0x3f, 0x6, 0x7f, 0x5, 0x9, 0x6, 0x4, 0x1, 0x100000001, 0x1f, 0x686b, 0x1, 0x2, 0x9, 0x0, 0x9d, 0x38000000000000, 0x2, 0x8, 0x2, 0x8, 0x2, 0x4, 0x80000001, 0x5, 0x0, 0x6, 0x8000, 0x7, 0xd961, 0x1, 0x5]}) (async, rerun: 64) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xffffff81) 20:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002140), 0x1b4, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r3, {0x3}}, 0x18) 20:46:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x8000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/189) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x8000) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/189) (async) 20:46:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002140)={{0x8, 0x5, 0x8, 0xf954, '\x00', 0x4}, 0x0, 0x20, 0xe524, r1, 0x9, 0x40, 'syz1\x00', &(0x7f00000020c0)=['/dev/\x00\x00\x00\x00\x00\x00\x00', '/dev/random\x00', '(}$.:[}$l+.\x00', '/dev/random\x00', '/dev/random\x00', '/dev/random\x00', '(@%*(\x00', '/dev/random\x00', '\x00'], 0x5b}) 20:46:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000000, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x6, 0x2, 0x7f8, 0x1, 'syz1\x00'}, 0x1, [0x800, 0xfffffffffffffffb, 0xd2e, 0xd22, 0x7, 0xf49b, 0x5f4065e, 0x100, 0x2, 0x1, 0xb50, 0xddb, 0xffffffff, 0x2, 0x6, 0xffff, 0x9, 0x0, 0xdd, 0x0, 0x7fffffff, 0x7fff, 0x20, 0xff, 0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x101, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0x6, 0x5, 0x0, 0x1, 0xe450, 0x2, 0x2, 0xc5, 0x5, 0xa32e, 0x8001, 0xfffffffffffffff8, 0x7, 0x400, 0x401, 0x1, 0x850, 0x3, 0x1, 0x8, 0x8, 0x8, 0x6, 0xff, 0x2, 0x20, 0x5, 0x7, 0xe65, 0x9, 0x81, 0x2, 0x3, 0x1e33, 0x3, 0x7fff, 0xc58, 0x10000, 0xfffffffffffffff7, 0x4, 0x8e, 0x6, 0x7, 0x401, 0x40, 0x9, 0xff, 0x5, 0x101, 0x4, 0x0, 0xbad, 0x20, 0x9, 0x100000000, 0x8ba5, 0x2, 0xb11, 0x8000, 0x0, 0x837, 0xfffffffffffffff9, 0x3, 0x3, 0x3f, 0x6, 0x7f, 0x5, 0x9, 0x6, 0x4, 0x1, 0x100000001, 0x1f, 0x686b, 0x1, 0x2, 0x9, 0x0, 0x9d, 0x38000000000000, 0x2, 0x8, 0x2, 0x8, 0x2, 0x4, 0x80000001, 0x5, 0x0, 0x6, 0x8000, 0x7, 0xd961, 0x1, 0x5]}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xffffff81) 20:46:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002140), 0x1b4, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r3, {0x3}}, 0x18) 20:46:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) recvmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/234, 0xea}], 0x9}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x420200) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:10 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002140)={{0x8, 0x5, 0x8, 0xf954, '\x00', 0x4}, 0x0, 0x20, 0xe524, r1, 0x9, 0x40, 'syz1\x00', &(0x7f00000020c0)=['/dev/\x00\x00\x00\x00\x00\x00\x00', '/dev/random\x00', '(}$.:[}$l+.\x00', '/dev/random\x00', '/dev/random\x00', '/dev/random\x00', '(@%*(\x00', '/dev/random\x00', '\x00'], 0x5b}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002140)={{0x8, 0x5, 0x8, 0xf954, '\x00', 0x4}, 0x0, 0x20, 0xe524, r1, 0x9, 0x40, 'syz1\x00', &(0x7f00000020c0)=['/dev/\x00\x00\x00\x00\x00\x00\x00', '/dev/random\x00', '(}$.:[}$l+.\x00', '/dev/random\x00', '/dev/random\x00', '/dev/random\x00', '(@%*(\x00', '/dev/random\x00', '\x00'], 0x5b}) (async) 20:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x20201) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x400, 0x4b8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 20:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000002140), 0x1b4, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) (async) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r3, {0x3}}, 0x18) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x420200) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x20201) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x400, 0x4b8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x20201) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x400, 0x4b8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) (async) 20:46:10 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000280)={r5, 0x0, 0xffff, 0x100, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000340)=0x80000001, 0x4) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x9) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x420200) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x420200) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/1) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r2, &(0x7f0000000100)="7b465b45221c7243f592d4bc71e63ffc48f5b05a46d28a2fb478209647bd4c82b7503990e841b2f500f7d65b63eacbb82b6d138b8b2ce46f3efd72038d7fec9f1d539e732f75773b9622", 0x4a, 0x2404, 0x0) 20:46:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x20201) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x400, 0x4b8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 20:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) (async) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$SIOCRSACCEPT(r4, 0x89e3) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1, 0x48, &(0x7f0000000140)="d6400376da38b6b5f4cd2ee37c820408ca23b6f602dd0bcf135b09fe93b80ae36e68f013e22a52539d783715f1f31aa200875de9ec8152e24b3f50d11cc9eaa422aa9a0000000000"}) 20:46:10 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 32) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000280)={r5, 0x0, 0xffff, 0x100, 0x4}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000340)=0x80000001, 0x4) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x9) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1, 0x48, &(0x7f0000000140)="d6400376da38b6b5f4cd2ee37c820408ca23b6f602dd0bcf135b09fe93b80ae36e68f013e22a52539d783715f1f31aa200875de9ec8152e24b3f50d11cc9eaa422aa9a0000000000"}) 20:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r2, &(0x7f0000000100)="7b465b45221c7243f592d4bc71e63ffc48f5b05a46d28a2fb478209647bd4c82b7503990e841b2f500f7d65b63eacbb82b6d138b8b2ce46f3efd72038d7fec9f1d539e732f75773b9622", 0x4a, 0x2404, 0x0) 20:46:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r2, &(0x7f0000000100)="7b465b45221c7243f592d4bc71e63ffc48f5b05a46d28a2fb478209647bd4c82b7503990e841b2f500f7d65b63eacbb82b6d138b8b2ce46f3efd72038d7fec9f1d539e732f75773b9622", 0x4a, 0x2404, 0x0) 20:46:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:10 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x240200, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000280)={r5, 0x0, 0xffff, 0x100, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000340)=0x80000001, 0x4) (async) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x9) 20:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_notify(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(r2, &(0x7f0000000100)="7b465b45221c7243f592d4bc71e63ffc48f5b05a46d28a2fb478209647bd4c82b7503990e841b2f500f7d65b63eacbb82b6d138b8b2ce46f3efd72038d7fec9f1d539e732f75773b9622", 0x4a, 0x2404, 0x0) 20:46:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1, 0x48, &(0x7f0000000140)="d6400376da38b6b5f4cd2ee37c820408ca23b6f602dd0bcf135b09fe93b80ae36e68f013e22a52539d783715f1f31aa200875de9ec8152e24b3f50d11cc9eaa422aa9a0000000000"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1, 0x48, &(0x7f0000000140)="d6400376da38b6b5f4cd2ee37c820408ca23b6f602dd0bcf135b09fe93b80ae36e68f013e22a52539d783715f1f31aa200875de9ec8152e24b3f50d11cc9eaa422aa9a0000000000"}) (async) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x71, 0x821}) 20:46:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000025ff7000fedbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0x5421, &(0x7f0000000140)) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100)=0xa76, 0x4) 20:46:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x80302) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0xffffffff, 0x8c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="1f4f"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000540)=""/257) 20:46:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x71, 0x821}) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x38800, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000340)=""/103, 0x67, &(0x7f0000000140)=""/179, 0x1, 0x1}}, 0x48) 20:46:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x80302) (async) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0xffffffff, 0x8c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="1f4f"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000540)=""/257) 20:46:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000025ff7000fedbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0x5421, &(0x7f0000000140)) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100)=0xa76, 0x4) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x38800, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000340)=""/103, 0x67, &(0x7f0000000140)=""/179, 0x1, 0x1}}, 0x48) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x71, 0x821}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x71, 0x821}) (async) 20:46:11 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x25, 0x0, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) 20:46:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x80302) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0xffffffff, 0x8c00) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="1f4f"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000540)=""/257) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x80302) (async) syz_open_dev$evdev(&(0x7f0000000300), 0xffffffff, 0x8c00) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="1f4f"}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000540)=""/257) (async) 20:46:11 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x25, 0x0, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000002c0)=0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x38800, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000340)=""/103, 0x67, &(0x7f0000000140)=""/179, 0x1, 0x1}}, 0x48) 20:46:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000025ff7000fedbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0x5421, &(0x7f0000000140)) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100)=0xa76, 0x4) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x6b0a82) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80001) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000100)={0x7ec9c35e, 0x2, 0x0, [{0x9, 0xffff, 0x2, 0x9, 0x54, 0x4, 0x7f, '\x00', 0x6}, {0x8, 0xabb4, 0x6, 0x40, 0x9, 0x40, 0x8, '\x00', 0x2}]}) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x3f1a40, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:11 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = socket(0x25, 0x0, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000021c0)={0xa0, 0x0, r3, [{0x1, 0x0, 0x4, 0x3f, ',@\\)'}, {0x2, 0x1, 0x4, 0x1, ',@\\)'}, {0x0, 0xff, 0xa, 0x90, '/dev/cuse\x00'}, {0x2, 0x4, 0xa, 0x1000, '/dev/cuse\x00'}]}, 0xa0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r5, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r6}, 0x18) write$FUSE_GETXATTR(r2, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, r6, {0x80000000}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x30, 0x0, r3, [{0x4, 0x8000000000000001, 0x4, 0x80000001, ',@\\)'}]}, 0x30) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x89) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x6b0a82) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80001) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000100)={0x7ec9c35e, 0x2, 0x0, [{0x9, 0xffff, 0x2, 0x9, 0x54, 0x4, 0x7f, '\x00', 0x6}, {0x8, 0xabb4, 0x6, 0x40, 0x9, 0x40, 0x8, '\x00', 0x2}]}) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xbaac, 0x10020) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x1, 0x400, 0x7f}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000002c0)={r4, r5, 0xa9, 0x80000001, 0x4}) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x997, 0x2, 0x2, 0xffffffffffffffff}}}, 0x28) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r3], 0x1}) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x3f1a40, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x3f1a40, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x6b0a82) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) (async) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80001) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000100)={0x7ec9c35e, 0x2, 0x0, [{0x9, 0xffff, 0x2, 0x9, 0x54, 0x4, 0x7f, '\x00', 0x6}, {0x8, 0xabb4, 0x6, 0x40, 0x9, 0x40, 0x8, '\x00', 0x2}]}) 20:46:11 executing program 3: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1f, 0x8, 0xff, 0xff}, 0x6) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x4200c0) syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1a1802) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xbaac, 0x10020) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x1, 0x400, 0x7f}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000002c0)={r4, r5, 0xa9, 0x80000001, 0x4}) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x997, 0x2, 0x2, 0xffffffffffffffff}}}, 0x28) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r3], 0x1}) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x3f1a40, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x3f1a40, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:11 executing program 3: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1f, 0x8, 0xff, 0xff}, 0x6) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x4200c0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1a1802) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7380, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x9, 0x12348}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) 20:46:11 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\'^'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@flag='dirsync'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xbaac, 0x10020) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x1, 0x400, 0x7f}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000002c0)={r4, r5, 0xa9, 0x80000001, 0x4}) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x997, 0x2, 0x2, 0xffffffffffffffff}}}, 0x28) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r3], 0x1}) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x9) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:11 executing program 0: r0 = socket(0x1, 0x3, 0x8003) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 20:46:11 executing program 3: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1f, 0x8, 0xff, 0xff}, 0x6) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x4200c0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1a1802) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7380, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x9, 0x12348}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) 20:46:11 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)="c810"}) 20:46:11 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\'^'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@flag='dirsync'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:11 executing program 0: r0 = socket(0x1, 0x3, 0x8003) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1, 0x3, 0x8003) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 20:46:11 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)="c810"}) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7380, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x9, 0x12348}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x7380, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x9, 0x12348}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x80) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) (async) 20:46:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7380, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x9, 0x12348}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) 20:46:11 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\'^'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@flag='dirsync'}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:11 executing program 0: r0 = socket(0x1, 0x3, 0x8003) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1, 0x3, 0x8003) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 20:46:11 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)="c810"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)="c810"}) (async) 20:46:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/75) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:11 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 20:46:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x101) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x401) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x7ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x7a}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x6, 0xffffffff, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x6, 0x4, 0x2, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000480)={0x0, 0x37c, 0x8000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 20:46:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x402901) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4fa, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r3}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x3b, 0x6, 0x0, {0x6, 0x3, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) 20:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x7, 0x5, 0xc07, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffff7, 0x5, 0x8000, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x6}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x7) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x9, 0x4, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x403505503e29e55, 0x1, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x1, 0x9, 0x7, 0x8, 0x2, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xcb, &(0x7f00000002c0)=""/203, 0x41100, 0x2, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r0, r1, r1, r1, r3, r1, r1, r1, r1, r0]}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x25, 0x8}, 0x10) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x101) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x401) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x7ff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x7a}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x6, 0xffffffff, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x6, 0x4, 0x2, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000480)={0x0, 0x37c, 0x8000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000000000009335ee9c7367a0c76d49cad582403c823aef3b8c57b505b0d6e2064ce9ee7396232210534932bc03a61c80b7ff35181e21b7b50c46ca9e1ea55ba0edba8e752aec3b863fe169cd4698ada4be3bd5f40ea14bf08d9d7158ea380718060dfd1bfb38d37d04c6858927a36ba4305ef73e8f1c77551ad55f20e8055332b4de1ddf0c4dec301e53dd198f0e53e4fe105c1e10f68fe15c3777325b250bc124f51465554b6dbb855dfcc16b90364164ec0fb1b1a7961923e651f089955741d051c020c29f7ee5d8ffd7cf27a994fb9f5892b56efe67b2318bd350364011534ee05a27e57176f2105e0d5e0bcd7827a426656838f18e1d3f0329e37a12d2e7d8b6b06262f928147dc79fb9d537ad33902d6bc5bd0c9802819196346905780112916a67f6db488691ba8731a6dd42271a0084304ad21e5a3d95263d2884aeb7b145b265a4b30e89231431168d829f92dd9b4b6c2bc0532b213375726b2a347d1f92eccc3a15b8e8678c3e26212e6703bade136719c6be863125e8024c25c2d26c869f8c9207c23365cfc795d6e97e3514fe2002333e94"]) (async, rerun: 64) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) 20:46:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000de000000a5d8fb1cc66b8955c11d2818ba85965da0d6dadc7320744532597d2b51a85cdbf54970deeaf6f1b28905fa3a631a4a4bb48438b27b58deb19430b1737076b2a9cc4ddd52b404e9ba5d39bac8e56cb34d5f9c096f0c1382704edb0d4870187c7c4f2d62c05f9feca0d6083aefb5c90b052ac0d70f95629e2ddca6ebfc43de7f3b790d58bae348bfb4a55d26bc2fa35ea931af4c1a4548ebae97dfe9989daec5ead3f66c79937d5a26b87e6c266d81e28a0dc5636d61a2f69f2eaac761c97ae22b7a489a20ef3b942bbe0cfe35464acdef9d3b1d662411067f0ed97f9619a554f323bbaf9dc8182cdc5d412f0b5250261f7168f65be93cbb6cb3609764e5963ca9b0dcc1da034a98e3867a712c78167d87d27eaa0d37061bea8092ad16c9d5bdc645d6d347694ee2eeb6e32b4b5f24c7728832ed51f621ea189fd0fdcb74974aab11e92363b0ebe03c1ac16dd6928b640100010000000000199ba7aaa9747793fe209d37b54433fc87e247b669"]) (async) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x402901) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4fa, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r3}) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x3b, 0x6, 0x0, {0x6, 0x3, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x7, 0x5, 0xc07, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffff7, 0x5, 0x8000, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x6}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x7) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x9, 0x4, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x403505503e29e55, 0x1, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x1, 0x9, 0x7, 0x8, 0x2, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xcb, &(0x7f00000002c0)=""/203, 0x41100, 0x2, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r0, r1, r1, r1, r3, r1, r1, r1, r1, r0]}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x25, 0x8}, 0x10) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x402901) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x4fa, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000180)={r3}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x3b, 0x6, 0x0, {0x6, 0x3, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x101) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x401) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x7ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x7a}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x6, 0xffffffff, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x6, 0x4, 0x2, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000480)={0x0, 0x37c, 0x8000}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000000000009335ee9c7367a0c76d49cad582403c823aef3b8c57b505b0d6e2064ce9ee7396232210534932bc03a61c80b7ff35181e21b7b50c46ca9e1ea55ba0edba8e752aec3b863fe169cd4698ada4be3bd5f40ea14bf08d9d7158ea380718060dfd1bfb38d37d04c6858927a36ba4305ef73e8f1c77551ad55f20e8055332b4de1ddf0c4dec301e53dd198f0e53e4fe105c1e10f68fe15c3777325b250bc124f51465554b6dbb855dfcc16b90364164ec0fb1b1a7961923e651f089955741d051c020c29f7ee5d8ffd7cf27a994fb9f5892b56efe67b2318bd350364011534ee05a27e57176f2105e0d5e0bcd7827a426656838f18e1d3f0329e37a12d2e7d8b6b06262f928147dc79fb9d537ad33902d6bc5bd0c9802819196346905780112916a67f6db488691ba8731a6dd42271a0084304ad21e5a3d95263d2884aeb7b145b265a4b30e89231431168d829f92dd9b4b6c2bc0532b213375726b2a347d1f92eccc3a15b8e8678c3e26212e6703bade136719c6be863125e8024c25c2d26c869f8c9207c23365cfc795d6e97e3514fe2002333e94"]) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x101) (async) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x8000000000000000, 0x100) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x401) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x3ff, 0x7ff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x7a}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x6, 0xffffffff, 0x401}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000200)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x6, 0x4, 0x2}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000480)={0x0, 0x37c, 0x8000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, r1, 0xbf86, 0x3, 0x5}) 20:46:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x7, 0x5, 0xc07, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffff7, 0x5, 0x8000, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x6}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x7) (async) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x9, 0x4, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x403505503e29e55, 0x1, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x401}, @alu={0x4, 0x1, 0x9, 0x7, 0x8, 0x2, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xcb, &(0x7f00000002c0)=""/203, 0x41100, 0x2, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x5, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r0, r1, r1, r1, r3, r1, r1, r1, r1, r0]}, 0x80) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x25, 0x8}, 0x10) 20:46:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000de000000a5d8fb1cc66b8955c11d2818ba85965da0d6dadc7320744532597d2b51a85cdbf54970deeaf6f1b28905fa3a631a4a4bb48438b27b58deb19430b1737076b2a9cc4ddd52b404e9ba5d39bac8e56cb34d5f9c096f0c1382704edb0d4870187c7c4f2d62c05f9feca0d6083aefb5c90b052ac0d70f95629e2ddca6ebfc43de7f3b790d58bae348bfb4a55d26bc2fa35ea931af4c1a4548ebae97dfe9989daec5ead3f66c79937d5a26b87e6c266d81e28a0dc5636d61a2f69f2eaac761c97ae22b7a489a20ef3b942bbe0cfe35464acdef9d3b1d662411067f0ed97f9619a554f323bbaf9dc8182cdc5d412f0b5250261f7168f65be93cbb6cb3609764e5963ca9b0dcc1da034a98e3867a712c78167d87d27eaa0d37061bea8092ad16c9d5bdc645d6d347694ee2eeb6e32b4b5f24c7728832ed51f621ea189fd0fdcb74974aab11e92363b0ebe03c1ac16dd6928b640100010000000000199ba7aaa9747793fe209d37b54433fc87e247b669"]) 20:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101c00, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x181000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, r1, 0xbf86, 0x3, 0x5}) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x2, 0x5}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x103) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x20, 0x80000000003e}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40, 0x12b082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101c00, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x181000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) 20:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0x47}) 20:46:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x5) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)=""/56) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x193001, 0x0) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x2, 0x5}) (async) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x103) (async, rerun: 32) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x20, 0x80000000003e}) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40, 0x12b082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, r1, 0xbf86, 0x3, 0x5}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, r1, 0xbf86, 0x3, 0x5}) (async) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101c00, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x181000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101c00, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x181000) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) (async) 20:46:12 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x5) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)=""/56) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x193001, 0x0) 20:46:12 executing program 3: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000000, 0x1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0x7, "8bfd15759dd67204f078eaa3a1e69507c6004c916eef4744fb0997887e750229"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x6, "f476c573781cd92caeab5ba7cdc67bdcd90ce4abd41a93173ebde34420b6039c"}) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x2, 0x5}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="02032200010000e0b40000000fce40874ded975e48e24a6b484e8448294f3dbc9a90d3b829d7e58901eaef9437746ec75d5b162de1fdc075a3e8df45a3082ace73ae3a4fd8ab3ba15bdbb62c9356da47e07f26b7b613859fa68f951439cf048a88f3814bba77659bcf376bc2b86ab9d291175acb4685a018d893bced349ffc33d80ee1fd6e2b1eb0b1440f2f6b94cb87693ddb9bcf3e8d6d99da4a9a62efb7103ffae73f12815e409765e9f517c29e37f33d38ad16bb756a36f240f0b5ead32f8871d233dce4583d0aae73ae4e225a779ee06a175954f415a62f2e330486a2dae0f16c99beaed54faac17c5fb5064a4f2a2f3c8f8f1ae0f8e6934001a36a397495dac0eb251f8d12ac3d06983d3558cc54d81684d16aa86705a39681a098d7e2187e42b246a2d5067acc99a4c573eca377bb7eadbc51c51efee841bead27fd77b5735c00514028ca464a952532c0f00d18fccc57bcb3ed256ed8db41b605e4"], 0x103) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x20, 0x80000000003e}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40, 0x12b082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x109, 0x2, 0x5}) (async) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) (async) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x103) (async) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x20, 0x80000000003e}) (async) syz_open_dev$dri(&(0x7f0000000300), 0x40, 0x12b082) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 20:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0xb3095385ac2c0aff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x202000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x7) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:12 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x5) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000000c0)=""/56) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x193001, 0x0) 20:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0xb3095385ac2c0aff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x3}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0xb3095385ac2c0aff) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x202000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x7) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x202000) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x7) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:12 executing program 3: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0)) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000000, 0x1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0x7, "8bfd15759dd67204f078eaa3a1e69507c6004c916eef4744fb0997887e750229"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x6, "f476c573781cd92caeab5ba7cdc67bdcd90ce4abd41a93173ebde34420b6039c"}) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5ddc, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x800005, 0x4, 0x4, 0x0, 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/76, &(0x7f0000000180)=0x4c) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x401, 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xfff, 0x0, 0xa6c, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:12 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xce}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6b}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x3, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0xb3095385ac2c0aff) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:12 executing program 3: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0)) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10000000, 0x1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0x7, "8bfd15759dd67204f078eaa3a1e69507c6004c916eef4744fb0997887e750229"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x6, "f476c573781cd92caeab5ba7cdc67bdcd90ce4abd41a93173ebde34420b6039c"}) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x202000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x7) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:12 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xce}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6b}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x1) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5ddc, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x800005, 0x4, 0x4, 0x0, 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/76, &(0x7f0000000180)=0x4c) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x401, 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xfff, 0x0, 0xa6c, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000280)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x840) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x5ddc, 0x400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x800005, 0x4, 0x4}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/76, &(0x7f0000000180)=0x4c) (async) syz_open_dev$dri(&(0x7f0000000200), 0x401, 0x400002) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xfff, 0x0, 0xa6c}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000280)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:12 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = getegid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}]}}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x6}}, 0x30) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x5ddc, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x800005, 0x4, 0x4, 0x0, 0x0}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000100)=""/76, &(0x7f0000000180)=0x4c) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x401, 0x400002) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xfff, 0x0, 0xa6c, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000280)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:12 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xce}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6b}]}, 0x64}, 0x1, 0x0, 0x0, 0x844}, 0x1) (async, rerun: 64) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0xa0840) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=[0x3ff, 0x5, 0x4]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, r2, r2], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:12 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = getegid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}]}}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x6}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:12 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:12 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0xec45}}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:12 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = getegid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}]}}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x6}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:12 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0xa0840) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=[0x3ff, 0x5, 0x4]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, r2, r2], 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r1, r2, r3, 0x0, r4], 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="468af3bef2be0e900533578d6ddc404425eca06290677d9b7bd47a8b637fc6e55ccf322ffa5d9c77c785e2ffcd015361b70e4ff000a09b356105e82692b5773b5f166b9ce2a54b312a063df8f3a115070fd1db3468", 0x55) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:12 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) (async) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0xec45}}, 0x18) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:12 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0xa0840) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=[0x3ff, 0x5, 0x4]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, r2, r2], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0xa0840) (async) syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x10000) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=[0x3ff, 0x5, 0x4]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, r2, r2], 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r1, r2, r3, 0x0, r4], 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async, rerun: 64) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="468af3bef2be0e900533578d6ddc404425eca06290677d9b7bd47a8b637fc6e55ccf322ffa5d9c77c785e2ffcd015361b70e4ff000a09b356105e82692b5773b5f166b9ce2a54b312a063df8f3a115070fd1db3468", 0x55) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/198) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x300) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x7, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/198) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 20:46:13 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0xec45}}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) (async) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0xec45}}, 0x18) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r1, r2, r3, 0x0, r4], 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="468af3bef2be0e900533578d6ddc404425eca06290677d9b7bd47a8b637fc6e55ccf322ffa5d9c77c785e2ffcd015361b70e4ff000a09b356105e82692b5773b5f166b9ce2a54b312a063df8f3a115070fd1db3468", 0x55) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r1, r2, r3, 0x0, r4], 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="468af3bef2be0e900533578d6ddc404425eca06290677d9b7bd47a8b637fc6e55ccf322ffa5d9c77c785e2ffcd015361b70e4ff000a09b356105e82692b5773b5f166b9ce2a54b312a063df8f3a115070fd1db3468", 0x55) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x300) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x4, 0x7, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/198) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xfffff800, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000021c0)) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r12 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f00000068c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000cf40)=ANY=[@ANYBLOB="2805ffff84567fbf127c00000000000049651a2b3c4def51000081000000b5e18400", @ANYRES64=r3, @ANYBLOB="060000000000000000000000000000004d00000000000000ff0000000000000002000000540500000000000000000000ff0000000000000001000100000000004000000000000000f00e0000000000000300000000000000ffffffff01000000010000000040000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="8bea00000100000000000000030000000000000008000000000000000f000000812a433c2f6465762f6472692f6361726423000001000000000000000200000000000000d733000000000000010000000000000006000000ff000000010000000000000007000000000000000800000000000000240000000000000008000000000000000000c0d81a00000005000000faffffff000000000060000006000000", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="ff00000002000000000000000600000000000000030000000000000000000000040000000500000000000000000000000000000003000000000000000000010000000000400000000100000003000000000000000300000000000000010000000000000009000000000000000000000001000000090000000000000000000000000000001f00000000600000ffff0000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="1f0000000900000000000000010000000000000000000000000000000d000000010400002c2d28217b402c2828252e452b0000000600000000000000000000000000000007000000000000000100000000000000ff0700001f000000030000000000000000000000000000000600000000000000ffffffff00000000000000000000000000000000000000000000120001000000000000000010000008000000", @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="8100000000000000000000000100000000000000ebec922a0000000005000000010000002a25253a7900000004000000000000000200000000000000000030000000000009000000000000007b0700000100000003000000000000008100000000000000060000000000000000000000000000000200000000000000ff7f0000000000001f00000006000000008000000010000001800000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="090000000000000000000000000000000000000000800000000000000f000000010001002f6465762f6472692f636172642300000100000000000000030000000000000006000000000000000100010000000000feffffff040000000600000000000000050000000000000001000000000000000b9b5a76000000000300000000000000050000000000000081002000000001004000000000a0000000010000d8a13ffda20bf991cd255195c973bf2d3a9ec4b0670b3757777e829b956e0f91bdf674e6144f004f0a208cd59a1bab5355add215200aaa8d278c00b4902ddb9485", @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="000000200200000000000000030000000000000006000000000000000f000000070000002f6465762f6472692f6361726423000005000000000000000100000000000000000100000000000049000000000000000000000009000000020000000000000002000000000000004000000000000000ad05000000000000000000000000008004000000000000001729000001000000000000000040000041c00000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000000008000000000000040000000000000001800000000000000f000000090000002f6465762f6472692f636172642300000600000000000000010000000000000039000000000000000300000000000000fe0e000057e7000006000000000000005c00000000000000000000000000000001000000000000000300000000000000010000800000000000010000050000008000000000c00000bdca3e7c", @ANYRES32=r13, @ANYRES32=0xee01, @ANYBLOB="030000000400000000000000060000000000000001f8ffffffffffff00000000e6760000"], 0x528) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r14, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000008900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r14, &(0x7f000000a940)={0x28, 0xfffffffffffffffe, r15, {{0x0, 0x1, 0x2, r9}}}, 0x28) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002740)={0xa0, 0x0, r7, {{0x0, 0x2, 0x100000001, 0x9, 0xe0000000, 0x1000, {0x3, 0x10001, 0x2000000000000000, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x6000, 0x7, r4, r5, 0x1, 0x6}}, {0x0, 0x4}}}, 0xa0) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r16, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(r16, &(0x7f000000a980)={0x2020}, 0x2020) 20:46:13 executing program 0: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x2000, &(0x7f0000000080), 0x8, 0xffffffffffffffff, 0x4}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 20:46:13 executing program 0: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x2000, &(0x7f0000000080), 0x8, 0xffffffffffffffff, 0x4}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x501500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffffff8c, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x200004, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xfffff800, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000021c0)) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x80, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r10 = getegid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r12 = getegid() (async) read$FUSE(0xffffffffffffffff, &(0x7f00000068c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000cf40)=ANY=[@ANYBLOB="2805ffff84567fbf127c00000000000049651a2b3c4def51000081000000b5e18400", @ANYRES64=r3, @ANYBLOB="060000000000000000000000000000004d00000000000000ff0000000000000002000000540500000000000000000000ff0000000000000001000100000000004000000000000000f00e0000000000000300000000000000ffffffff01000000010000000040000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="8bea00000100000000000000030000000000000008000000000000000f000000812a433c2f6465762f6472692f6361726423000001000000000000000200000000000000d733000000000000010000000000000006000000ff000000010000000000000007000000000000000800000000000000240000000000000008000000000000000000c0d81a00000005000000faffffff000000000060000006000000", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="ff00000002000000000000000600000000000000030000000000000000000000040000000500000000000000000000000000000003000000000000000000010000000000400000000100000003000000000000000300000000000000010000000000000009000000000000000000000001000000090000000000000000000000000000001f00000000600000ffff0000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="1f0000000900000000000000010000000000000000000000000000000d000000010400002c2d28217b402c2828252e452b0000000600000000000000000000000000000007000000000000000100000000000000ff0700001f000000030000000000000000000000000000000600000000000000ffffffff00000000000000000000000000000000000000000000120001000000000000000010000008000000", @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="8100000000000000000000000100000000000000ebec922a0000000005000000010000002a25253a7900000004000000000000000200000000000000000030000000000009000000000000007b0700000100000003000000000000008100000000000000060000000000000000000000000000000200000000000000ff7f0000000000001f00000006000000008000000010000001800000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="090000000000000000000000000000000000000000800000000000000f000000010001002f6465762f6472692f636172642300000100000000000000030000000000000006000000000000000100010000000000feffffff040000000600000000000000050000000000000001000000000000000b9b5a76000000000300000000000000050000000000000081002000000001004000000000a0000000010000d8a13ffda20bf991cd255195c973bf2d3a9ec4b0670b3757777e829b956e0f91bdf674e6144f004f0a208cd59a1bab5355add215200aaa8d278c00b4902ddb9485", @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="000000200200000000000000030000000000000006000000000000000f000000070000002f6465762f6472692f6361726423000005000000000000000100000000000000000100000000000049000000000000000000000009000000020000000000000002000000000000004000000000000000ad05000000000000000000000000008004000000000000001729000001000000000000000040000041c00000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000000008000000000000040000000000000001800000000000000f000000090000002f6465762f6472692f636172642300000600000000000000010000000000000039000000000000000300000000000000fe0e000057e7000006000000000000005c00000000000000000000000000000001000000000000000300000000000000010000800000000000010000050000008000000000c00000bdca3e7c", @ANYRES32=r13, @ANYRES32=0xee01, @ANYBLOB="030000000400000000000000060000000000000001f8ffffffffffff00000000e6760000"], 0x528) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r14, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000008900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r14, &(0x7f000000a940)={0x28, 0xfffffffffffffffe, r15, {{0x0, 0x1, 0x2, r9}}}, 0x28) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002740)={0xa0, 0x0, r7, {{0x0, 0x2, 0x100000001, 0x9, 0xe0000000, 0x1000, {0x3, 0x10001, 0x2000000000000000, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x6000, 0x7, r4, r5, 0x1, 0x6}}, {0x0, 0x4}}}, 0xa0) (async) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r16, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(r16, &(0x7f000000a980)={0x2020}, 0x2020) 20:46:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000040)="c810"}) 20:46:13 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 0: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x2000, &(0x7f0000000080), 0x8, 0xffffffffffffffff, 0x4}) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x501500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffffff8c, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x200004, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x501500) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffffff8c, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x200004, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:13 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000040)="c810"}) 20:46:13 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) (async) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xfffff800, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000021c0)) (async) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r10 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r12 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f00000068c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000cf40)=ANY=[@ANYBLOB="2805ffff84567fbf127c00000000000049651a2b3c4def51000081000000b5e18400", @ANYRES64=r3, @ANYBLOB="060000000000000000000000000000004d00000000000000ff0000000000000002000000540500000000000000000000ff0000000000000001000100000000004000000000000000f00e0000000000000300000000000000ffffffff01000000010000000040000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="8bea00000100000000000000030000000000000008000000000000000f000000812a433c2f6465762f6472692f6361726423000001000000000000000200000000000000d733000000000000010000000000000006000000ff000000010000000000000007000000000000000800000000000000240000000000000008000000000000000000c0d81a00000005000000faffffff000000000060000006000000", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="ff00000002000000000000000600000000000000030000000000000000000000040000000500000000000000000000000000000003000000000000000000010000000000400000000100000003000000000000000300000000000000010000000000000009000000000000000000000001000000090000000000000000000000000000001f00000000600000ffff0000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="1f0000000900000000000000010000000000000000000000000000000d000000010400002c2d28217b402c2828252e452b0000000600000000000000000000000000000007000000000000000100000000000000ff0700001f000000030000000000000000000000000000000600000000000000ffffffff00000000000000000000000000000000000000000000120001000000000000000010000008000000", @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB="8100000000000000000000000100000000000000ebec922a0000000005000000010000002a25253a7900000004000000000000000200000000000000000030000000000009000000000000007b0700000100000003000000000000008100000000000000060000000000000000000000000000000200000000000000ff7f0000000000001f00000006000000008000000010000001800000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="090000000000000000000000000000000000000000800000000000000f000000010001002f6465762f6472692f636172642300000100000000000000030000000000000006000000000000000100010000000000feffffff040000000600000000000000050000000000000001000000000000000b9b5a76000000000300000000000000050000000000000081002000000001004000000000a0000000010000d8a13ffda20bf991cd255195c973bf2d3a9ec4b0670b3757777e829b956e0f91bdf674e6144f004f0a208cd59a1bab5355add215200aaa8d278c00b4902ddb9485", @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="000000200200000000000000030000000000000006000000000000000f000000070000002f6465762f6472692f6361726423000005000000000000000100000000000000000100000000000049000000000000000000000009000000020000000000000002000000000000004000000000000000ad05000000000000000000000000008004000000000000001729000001000000000000000040000041c00000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000000008000000000000040000000000000001800000000000000f000000090000002f6465762f6472692f636172642300000600000000000000010000000000000039000000000000000300000000000000fe0e000057e7000006000000000000005c00000000000000000000000000000001000000000000000300000000000000010000800000000000010000050000008000000000c00000bdca3e7c", @ANYRES32=r13, @ANYRES32=0xee01, @ANYBLOB="030000000400000000000000060000000000000001f8ffffffffffff00000000e6760000"], 0x528) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r14, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000008900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r14, &(0x7f000000a940)={0x28, 0xfffffffffffffffe, r15, {{0x0, 0x1, 0x2, r9}}}, 0x28) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002740)={0xa0, 0x0, r7, {{0x0, 0x2, 0x100000001, 0x9, 0xe0000000, 0x1000, {0x3, 0x10001, 0x2000000000000000, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x6000, 0x7, r4, r5, 0x1, 0x6}}, {0x0, 0x4}}}, 0xa0) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r16, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(r16, &(0x7f000000a980)={0x2020}, 0x2020) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x501500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffffff8c, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x200004, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x501500) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffffff8c, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x200004, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x9, 0x6}}, 0x28) 20:46:13 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000040)="c810"}) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x4, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x9, 0x6}}, 0x28) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x9, 0x6}}, 0x28) (async) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xffffffff, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:13 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r2, r2, r4, r2], 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x4, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x9, 0x6}}, 0x28) 20:46:13 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10140) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x2, 0x8, 0x0, [{0x0, 0x1, 0xe2, 0x0, 0x81, 0x0, 0x9, '\x00', 0x4}, {0x6, 0x213, 0x5, 0x0, 0x1, 0x3f}, {0x9, 0x9, 0x1, 0x88, 0x9, 0x3, 0xc0, '\x00', 0x2e}, {0x7fffffffffffffff, 0x101, 0x6, 0x7, 0x81, 0x33, 0x44, '\x00', 0xfffffffffffffffa}, {0x10001, 0x7ff, 0xff, 0x5, 0x4, 0x2, 0x0, '\x00', 0xfffffffffffffffa}, {0x400, 0x200, 0x8000000, 0x1, 0x20, 0x81, 0x3, '\x00', 0x8}, {0x100000000, 0x5, 0x1ff, 0x6, 0x3d, 0x5, 0x2, '\x00', 0x656e}, {0xe344, 0xe66, 0x800, 0xe, 0x9, 0x40, 0x9, '\x00', 0x7}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xffffffff, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r2, r2, r4, r2], 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r2, r2, r4, r2], 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:13 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() getresgid(&(0x7f0000002100)=0x0, &(0x7f0000002140), &(0x7f0000002180)) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0xffffffffffffffda, r1, {0x2, 0x0, 0x1, 0x1, 0x0, 0x200, {0x5, 0x3bbe, 0xfffffffffffffff9, 0x9, 0x4, 0x117, 0x9, 0x10001, 0x512d65fa, 0x1000, 0x3, r2, r3, 0x7ff}}}, 0x90) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x4, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xffffffff, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0xffffffff, 0x1) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 20:46:13 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10140) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x2, 0x8, 0x0, [{0x0, 0x1, 0xe2, 0x0, 0x81, 0x0, 0x9, '\x00', 0x4}, {0x6, 0x213, 0x5, 0x0, 0x1, 0x3f}, {0x9, 0x9, 0x1, 0x88, 0x9, 0x3, 0xc0, '\x00', 0x2e}, {0x7fffffffffffffff, 0x101, 0x6, 0x7, 0x81, 0x33, 0x44, '\x00', 0xfffffffffffffffa}, {0x10001, 0x7ff, 0xff, 0x5, 0x4, 0x2, 0x0, '\x00', 0xfffffffffffffffa}, {0x400, 0x200, 0x8000000, 0x1, 0x20, 0x81, 0x3, '\x00', 0x8}, {0x100000000, 0x5, 0x1ff, 0x6, 0x3d, 0x5, 0x2, '\x00', 0x656e}, {0xe344, 0xe66, 0x800, 0xe, 0x9, 0x40, 0x9, '\x00', 0x7}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$ndb(0x0, 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10140) (async) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x2, 0x8, 0x0, [{0x0, 0x1, 0xe2, 0x0, 0x81, 0x0, 0x9, '\x00', 0x4}, {0x6, 0x213, 0x5, 0x0, 0x1, 0x3f}, {0x9, 0x9, 0x1, 0x88, 0x9, 0x3, 0xc0, '\x00', 0x2e}, {0x7fffffffffffffff, 0x101, 0x6, 0x7, 0x81, 0x33, 0x44, '\x00', 0xfffffffffffffffa}, {0x10001, 0x7ff, 0xff, 0x5, 0x4, 0x2, 0x0, '\x00', 0xfffffffffffffffa}, {0x400, 0x200, 0x8000000, 0x1, 0x20, 0x81, 0x3, '\x00', 0x8}, {0x100000000, 0x5, 0x1ff, 0x6, 0x3d, 0x5, 0x2, '\x00', 0x656e}, {0xe344, 0xe66, 0x800, 0xe, 0x9, 0x40, 0x9, '\x00', 0x7}]}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:13 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) r2 = getuid() getresgid(&(0x7f0000002100)=0x0, &(0x7f0000002140), &(0x7f0000002180)) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0xffffffffffffffda, r1, {0x2, 0x0, 0x1, 0x1, 0x0, 0x200, {0x5, 0x3bbe, 0xfffffffffffffff9, 0x9, 0x4, 0x117, 0x9, 0x10001, 0x512d65fa, 0x1000, 0x3, r2, r3, 0x7ff}}}, 0x90) (async, rerun: 64) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$RNDADDTOENTCNT(r4, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r2, r2, r4, r2], 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={r2, 0x0, 0x6, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r3, r2, r2, r4, r2], 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:13 executing program 3: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/241, 0xf1, &(0x7f0000000140)=""/81, 0x2, 0x3}}, 0x48) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 20:46:13 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10140) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x2, 0x8, 0x0, [{0x0, 0x1, 0xe2, 0x0, 0x81, 0x0, 0x9, '\x00', 0x4}, {0x6, 0x213, 0x5, 0x0, 0x1, 0x3f}, {0x9, 0x9, 0x1, 0x88, 0x9, 0x3, 0xc0, '\x00', 0x2e}, {0x7fffffffffffffff, 0x101, 0x6, 0x7, 0x81, 0x33, 0x44, '\x00', 0xfffffffffffffffa}, {0x10001, 0x7ff, 0xff, 0x5, 0x4, 0x2, 0x0, '\x00', 0xfffffffffffffffa}, {0x400, 0x200, 0x8000000, 0x1, 0x20, 0x81, 0x3, '\x00', 0x8}, {0x100000000, 0x5, 0x1ff, 0x6, 0x3d, 0x5, 0x2, '\x00', 0x656e}, {0xe344, 0xe66, 0x800, 0xe, 0x9, 0x40, 0x9, '\x00', 0x7}]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:13 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() getresgid(&(0x7f0000002100)=0x0, &(0x7f0000002140), &(0x7f0000002180)) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0xffffffffffffffda, r1, {0x2, 0x0, 0x1, 0x1, 0x0, 0x200, {0x5, 0x3bbe, 0xfffffffffffffff9, 0x9, 0x4, 0x117, 0x9, 0x10001, 0x512d65fa, 0x1000, 0x3, r2, r3, 0x7ff}}}, 0x90) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) getuid() (async) getresgid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)) (async) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0xffffffffffffffda, r1, {0x2, 0x0, 0x1, 0x1, 0x0, 0x200, {0x5, 0x3bbe, 0xfffffffffffffff9, 0x9, 0x4, 0x117, 0x9, 0x10001, 0x512d65fa, 0x1000, 0x3, r2, r3, 0x7ff}}}, 0x90) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r4, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:13 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = getuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,max_read=0x0000000000000020,default_permissions,max_read=0x0000000000000579,allow_other,max_read=0x0000000000000005,blksize=0x0000000000001a00,default_permissions,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x80000005, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:13 executing program 3: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/241, 0xf1, &(0x7f0000000140)=""/81, 0x2, 0x3}}, 0x48) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/241, 0xf1, &(0x7f0000000140)=""/81, 0x2, 0x3}}, 0x48) (async) 20:46:13 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x81) 20:46:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x10000, 0x2501) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x451b, 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x800, 0x400}}, 0x28) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 20:46:14 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async, rerun: 32) r1 = getuid() (rerun: 32) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,max_read=0x0000000000000020,default_permissions,max_read=0x0000000000000579,allow_other,max_read=0x0000000000000005,blksize=0x0000000000001a00,default_permissions,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x80000005, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:14 executing program 3: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/241, 0xf1, &(0x7f0000000140)=""/81, 0x2, 0x3}}, 0x48) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$vhost_msg(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/241, 0xf1, &(0x7f0000000140)=""/81, 0x2, 0x3}}, 0x48) (async) 20:46:14 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x81) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) (async) 20:46:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 20:46:14 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = getuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,max_read=0x0000000000000020,default_permissions,max_read=0x0000000000000579,allow_other,max_read=0x0000000000000005,blksize=0x0000000000001a00,default_permissions,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x80000005, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) getuid() (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,max_read=0x0000000000000020,default_permissions,max_read=0x0000000000000579,allow_other,max_read=0x0000000000000005,blksize=0x0000000000001a00,default_permissions,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x6, 0x80000005, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 20:46:14 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:14 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, 0xffffffffffffffff) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x81) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) (async) 20:46:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 20:46:14 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async, rerun: 64) ioctl$SIOCRSACCEPT(r2, 0x89e3) (rerun: 64) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x4000) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x977f, 0x20000003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x82000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01064c1, &(0x7f0000000100)={r6}) 20:46:14 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2640, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)=0xcd7e) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)}) 20:46:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) (async) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x4000) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x977f, 0x20000003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x82000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01064c1, &(0x7f0000000100)={r6}) 20:46:14 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2640, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)=0xcd7e) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2640, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)=0xcd7e) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) (async) 20:46:14 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7ff, 0x1ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7ff, 0x1ff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000140)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)}) (async) 20:46:14 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)}) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x4000) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x977f, 0x20000003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x82000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01064c1, &(0x7f0000000100)={r6}) 20:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x995, 0x408a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xa1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x0, 0x1}) 20:46:14 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2640, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)=0xcd7e) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x6a2640, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)=0xcd7e) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) (async) 20:46:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x995, 0x408a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xa1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x995, 0x408a00) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xa1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x0, 0x1}) (async) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r3, {0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:14 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x80000000) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) 20:46:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x105800, 0x0) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) (async) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r3, {0x3}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:14 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x80000000) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) 20:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x995, 0x408a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xa1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x995, 0x408a00) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xa1, 0x3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x0, 0x1}) (async) 20:46:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xa0, 0x3, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x18, 0x7800, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x88, &(0x7f0000000180)=""/136, 0x40f00, 0x1, '\x00', r0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x24, 0xc, 0x9}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x4, 0x4}}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket(0x18, 0x800, 0x0) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x105800, 0x0) 20:46:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xa0, 0x3, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x18, 0x7800, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x88, &(0x7f0000000180)=""/136, 0x40f00, 0x1, '\x00', r0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x24, 0xc, 0x9}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x4, 0x4}}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket(0x18, 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xa0, 0x3, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x18, 0x7800, 0x1, 0x7}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x88, &(0x7f0000000180)=""/136, 0x40f00, 0x1, '\x00', r0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x24, 0xc, 0x9}, 0x10}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x4, 0x4}}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket(0x18, 0x800, 0x0) (async) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r3, {0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r2, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r3}, 0x18) (async) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r3, {0x3}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:14 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x80000000) (async) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) 20:46:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x105800, 0x0) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x610282) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, r2, {{0x5, 0x1, 0x1}}}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x4, 0x1ff}}, 0x30) 20:46:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x610282) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, r2, {{0x5, 0x1, 0x1}}}, 0x28) (async) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x4, 0x1ff}}, 0x30) 20:46:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x8000, 0x185000) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xa0, 0x3, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x18, 0x7800, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ee0b040000000000000000008520000005000000183d000002005f9aea993933da69041a9e91b0010000000000000000000085200000010000009500000000000000185a000001000000000000000000000095000000000000006493ccfd3e4d34a162958014072cb4b9d2d02b09a2b9edd480e8f3402659b7e0108c7035c6d32295238fafc2ef8bdd66dcec0503603610aff0d381d25489ec06a614fb65588f7cdd92b1ca73108b985f77f3f168ebe6849c711990ce9575e930d4c286c92a595aca1d40dd175337ac4c60bba9ac5155d9b45d3bfa74b7538edfee24dfa96d356747944ab6fd1092ba4022ed591c74edadfca298dc2131092d434fbbbe8812779952086d6205564f17470588c298e3fcb51d137fe4c236810b60b70aaf5af945b60ee0152160ec43f5b4e5e13338f4c8e040b7c0f27c7b2c1fb4542d3837ba7a82ece1121b5f5e12"], &(0x7f0000000080)='GPL\x00', 0x1, 0x88, &(0x7f0000000180)=""/136, 0x40f00, 0x1, '\x00', r0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x24, 0xc, 0x9}, 0x10}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x4, 0x4}}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket(0x18, 0x800, 0x0) 20:46:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x8000, 0x185000) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x610282) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async, rerun: 32) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0x0, r2, {{0x5, 0x1, 0x1}}}, 0x28) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x4, 0x1ff}}, 0x30) (rerun: 32) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r1, 0x0, r2, 0x0, r3, 0x0, 0x0, 0x0, r4], 0x9}) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:15 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x8000, 0x185000) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x2, 0x20002}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x81d3cded62549460}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4], 0x1, 0x1}) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r1, 0x0, r2, 0x0, r3, 0x0, 0x0, 0x0, r4], 0x9}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r1, 0x0, r2, 0x0, r3, 0x0, 0x0, 0x0, r4], 0x9}) (async) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x8000, 'syz1\x00'}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:15 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x2, 0x20002}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x81d3cded62549460}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4], 0x1, 0x1}) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x83d, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x8000, 'syz1\x00'}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x8000, 'syz1\x00'}) (async) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/1) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x8000, 0x185000) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r1, 0x0, r2, 0x0, r3, 0x0, 0x0, 0x0, r4], 0x9}) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x2, 0x20002}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x81d3cded62549460}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4], 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x2, 0x20002}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x81d3cded62549460}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4], 0x1, 0x1}) (async) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x83d, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x83d, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:15 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x4e000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000380)=""/197) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000800000000000000000000009913f1fe2491f61a38b2f36dc6e2315607ef1848cdb1481e658984585ccf3d708193f5abe982641275d6569b2756a9028f3cdc18d6e435f4dea57c7f0095394b1638487f34f53842e2eb352f8f55e3231938a7c780b31747f189568e336879760d6b9f63cf5e076ea3b7cb5a853c7d3efecd31e8544123da56b69a74134fc159f4f626b3133001fa917a4eb430c39a0976bc7d0c621436407f1f14f4c0b3559da715871ace90b050c60837c0"]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x1, 0x3, 0x8, 0x7ff, 'syz0\x00', 0x6}, 0x0, 0x400, 0xfff, 0x0, 0x9, 0x4, 'syz1\x00', &(0x7f00000001c0)=['/dev/s\x80d/controlC#\x00', '/dev/random\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/random\x00', '!\x00', '\x00', '/dev/snd/controlC#\x00', '+\x00'], 0x69}) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x8000, 'syz1\x00'}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/1) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) 20:46:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:15 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x4e000) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000380)=""/197) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000800000000000000000000009913f1fe2491f61a38b2f36dc6e2315607ef1848cdb1481e658984585ccf3d708193f5abe982641275d6569b2756a9028f3cdc18d6e435f4dea57c7f0095394b1638487f34f53842e2eb352f8f55e3231938a7c780b31747f189568e336879760d6b9f63cf5e076ea3b7cb5a853c7d3efecd31e8544123da56b69a74134fc159f4f626b3133001fa917a4eb430c39a0976bc7d0c621436407f1f14f4c0b3559da715871ace90b050c60837c0"]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x1, 0x3, 0x8, 0x7ff, 'syz0\x00', 0x6}, 0x0, 0x400, 0xfff, 0x0, 0x9, 0x4, 'syz1\x00', &(0x7f00000001c0)=['/dev/s\x80d/controlC#\x00', '/dev/random\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/random\x00', '!\x00', '\x00', '/dev/snd/controlC#\x00', '+\x00'], 0x69}) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x1, 0x18, [0x8000, 0x6, 0xfffffff8, 0x1, 0x7f, 0x81]}) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x83d, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x83d, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) (async) 20:46:15 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xa0, 0x3, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x18, 0x7800, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x88, &(0x7f0000000180)=""/136, 0x40f00, 0x1, '\x00', r0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x24, 0xc, 0x9}, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x4, 0x4}}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket(0x18, 0x800, 0x0) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001140)=""/4096) 20:46:15 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x4e000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000380)=""/197) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000800000000000000000000009913f1fe2491f61a38b2f36dc6e2315607ef1848cdb1481e658984585ccf3d708193f5abe982641275d6569b2756a9028f3cdc18d6e435f4dea57c7f0095394b1638487f34f53842e2eb352f8f55e3231938a7c780b31747f189568e336879760d6b9f63cf5e076ea3b7cb5a853c7d3efecd31e8544123da56b69a74134fc159f4f626b3133001fa917a4eb430c39a0976bc7d0c621436407f1f14f4c0b3559da715871ace90b050c60837c0"]) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x1, 0x3, 0x8, 0x7ff, 'syz0\x00', 0x6}, 0x0, 0x400, 0xfff, 0x0, 0x9, 0x4, 'syz1\x00', &(0x7f00000001c0)=['/dev/s\x80d/controlC#\x00', '/dev/random\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/random\x00', '!\x00', '\x00', '/dev/snd/controlC#\x00', '+\x00'], 0x69}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x4e000) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000380)=""/197) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000800000000000000000000009913f1fe2491f61a38b2f36dc6e2315607ef1848cdb1481e658984585ccf3d708193f5abe982641275d6569b2756a9028f3cdc18d6e435f4dea57c7f0095394b1638487f34f53842e2eb352f8f55e3231938a7c780b31747f189568e336879760d6b9f63cf5e076ea3b7cb5a853c7d3efecd31e8544123da56b69a74134fc159f4f626b3133001fa917a4eb430c39a0976bc7d0c621436407f1f14f4c0b3559da715871ace90b050c60837c0"]) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x1, 0x3, 0x8, 0x7ff, 'syz0\x00', 0x6}, 0x0, 0x400, 0xfff, 0x0, 0x9, 0x4, 'syz1\x00', &(0x7f00000001c0)=['/dev/s\x80d/controlC#\x00', '/dev/random\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/random\x00', '!\x00', '\x00', '/dev/snd/controlC#\x00', '+\x00'], 0x69}) (async) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x1, 0x18, [0x8000, 0x6, 0xfffffff8, 0x1, 0x7f, 0x81]}) 20:46:15 executing program 1: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) 20:46:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001140)=""/4096) 20:46:15 executing program 1: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8}) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x23cb42, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x4, 0x1, 0x3ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x800, 0x4, 0xfffffffffffffffc, 0x7, 0x8000000000000001], 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x1, 0x18, [0x8000, 0x6, 0xfffffff8, 0x1, 0x7f, 0x81]}) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x23cb42, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x23cb42, 0x0) (async) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:15 executing program 1: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8}) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x4, 0x1, 0x3ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x800, 0x4, 0xfffffffffffffffc, 0x7, 0x8000000000000001], 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x488cb863, 0x305940) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001140)=""/4096) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001140)=""/4096) (async) 20:46:15 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x23cb42, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x4, 0x1, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x800, 0x4, 0xfffffffffffffffc, 0x7, 0x8000000000000001], 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:15 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x488cb863, 0x305940) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x488cb863, 0x305940) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) (async) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket(0x26, 0xa, 0xfffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/255, 0x32, 0xff, 0x1}, 0x20) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) accept$alg(r4, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x5}}, 0x30) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 20:46:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x101040) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x17, 0x33, &(0x7f0000000240)="2e39004bcc1bdc693d3ed4a6aca90c7a260f85fdc44b350c6d59acf35fbbd53949bb66fc51c0ff5735b31f1e48bfaed0c472e3"}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000006000000000000000000000000fdffffff"], 0x29) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0xda) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/32) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) 20:46:15 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x545faefe, 'syz0\x00'}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, r4, {0x4}}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r7, 0x0, r8], &(0x7f0000000280)=[0x0, 0x1751, 0x100000001], 0x4}) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r9, &(0x7f00000068c0)={0x2020, 0x0, 0x0}, 0x921) r11 = getuid() write$FUSE_ATTR(r2, &(0x7f0000002140)={0x78, 0x0, r10, {0xd89, 0x0, 0x0, {0x5, 0xff, 0x4, 0x8, 0x1, 0x6, 0x2, 0x1, 0x0, 0xc000, 0x9, r11, 0xee01, 0x7, 0x8}}}, 0x78) 20:46:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = socket(0x26, 0xa, 0xfffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/255, 0x32, 0xff, 0x1}, 0x20) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) accept$alg(r4, 0x0, 0x0) (async, rerun: 64) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 64) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x5}}, 0x30) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (rerun: 32) 20:46:15 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x488cb863, 0x305940) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x101040) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x17, 0x33, &(0x7f0000000240)="2e39004bcc1bdc693d3ed4a6aca90c7a260f85fdc44b350c6d59acf35fbbd53949bb66fc51c0ff5735b31f1e48bfaed0c472e3"}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000006000000000000000000000000fdffffff"], 0x29) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0xda) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/32) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x101040) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x17, 0x33, &(0x7f0000000240)="2e39004bcc1bdc693d3ed4a6aca90c7a260f85fdc44b350c6d59acf35fbbd53949bb66fc51c0ff5735b31f1e48bfaed0c472e3"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) (async) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000006000000000000000000000000fdffffff"], 0x29) (async) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0xda) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/32) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) (async) 20:46:16 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x545faefe, 'syz0\x00'}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x545faefe, 'syz0\x00'}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = geteuid() mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18400, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@allow_other}], [{@measure}, {@fowner_gt={'fowner>', 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '\t[,!'}}, {@uid_lt={'uid<', r4}}, {@subj_role={'subj_role', 0x3d, '*(^/\t/'}}]}}) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x20) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, r4, {0x4}}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r7, 0x0, r8], &(0x7f0000000280)=[0x0, 0x1751, 0x100000001], 0x4}) (async) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r9, &(0x7f00000068c0)={0x2020, 0x0, 0x0}, 0x921) r11 = getuid() write$FUSE_ATTR(r2, &(0x7f0000002140)={0x78, 0x0, r10, {0xd89, 0x0, 0x0, {0x5, 0xff, 0x4, 0x8, 0x1, 0x6, 0x2, 0x1, 0x0, 0xc000, 0x9, r11, 0xee01, 0x7, 0x8}}}, 0x78) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2000000, 0x406d02) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000080000000000050000000000"]) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x9, 0xc0000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000002c0)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000400040000000000000800000000"]) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x80000) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xd38d, 0x583400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000200)=0x4000004) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/34) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = socket(0x26, 0xa, 0xfffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000100)=""/255, 0x32, 0xff, 0x1}, 0x20) (async) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) accept$alg(r4, 0x0, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x5}}, 0x30) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 20:46:16 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x545faefe, 'syz0\x00'}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x0, 'syz0\x00'}) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x545faefe, 'syz0\x00'}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) geteuid() 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x101040) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x17, 0x33, &(0x7f0000000240)="2e39004bcc1bdc693d3ed4a6aca90c7a260f85fdc44b350c6d59acf35fbbd53949bb66fc51c0ff5735b31f1e48bfaed0c472e3"}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000006000000000000000000000000fdffffff"], 0x29) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0xda) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/32) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x101040) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000280)={0x17, 0x33, &(0x7f0000000240)="2e39004bcc1bdc693d3ed4a6aca90c7a260f85fdc44b350c6d59acf35fbbd53949bb66fc51c0ff5735b31f1e48bfaed0c472e3"}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) (async) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000000c0)) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000006000000000000000000000000fdffffff"], 0x29) (async) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000140)=0xda) (async) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/32) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) (async) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x20) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, r4, {0x4}}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r7, 0x0, r8], &(0x7f0000000280)=[0x0, 0x1751, 0x100000001], 0x4}) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000780)={0x18}, 0x18) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r9, &(0x7f00000068c0)={0x2020, 0x0, 0x0}, 0x921) (async) r11 = getuid() write$FUSE_ATTR(r2, &(0x7f0000002140)={0x78, 0x0, r10, {0xd89, 0x0, 0x0, {0x5, 0xff, 0x4, 0x8, 0x1, 0x6, 0x2, 0x1, 0x0, 0xc000, 0x9, r11, 0xee01, 0x7, 0x8}}}, 0x78) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) (async) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2000000, 0x406d02) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000080000000000050000000000"]) (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x9, 0xc0000) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000002c0)=0x3) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000400040000000000000800000000"]) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x80000) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xd38d, 0x583400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000200)=0x4000004) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/34) (rerun: 32) 20:46:16 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d8bbc49a155d"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x50}}, 0x40) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) (async, rerun: 32) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2000000, 0x406d02) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000080000000000050000000000"]) (async, rerun: 32) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x9, 0xc0000) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000002c0)=0x3) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="03000400040000000000000800000000"]) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x80000) (async, rerun: 32) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xd38d, 0x583400) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000200)=0x4000004) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/34) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 20:46:16 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d8bbc49a155d"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x50}}, 0x40) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d8bbc49a155d"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x50}}, 0x40) (async) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x434201) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0x0, r5, {0x7ff}}, 0x18) 20:46:16 executing program 5: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x80002}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)) 20:46:16 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d8bbc49a155d"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x50}}, 0x40) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x434201) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0x0, r5, {0x7ff}}, 0x18) 20:46:16 executing program 5: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x80002}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x80002}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/72) 20:46:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x434201) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002140)={0x18, 0x0, r5, {0x7ff}}, 0x18) 20:46:16 executing program 5: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) eventfd(0x0) (async) write$eventfd(r0, &(0x7f0000000080), 0x8) (async) write$eventfd(r0, &(0x7f0000000080)=0x2, 0x8) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x80002}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x80002}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) 20:46:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x101000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r3 = socket(0x11, 0x4, 0x5) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0xff, 0x7, 0x34, 0x97}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:16 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x5, 0x19, "8f7fe123d403fe1bff85f1a26cbf66cbba0facdd5851d3ee86"}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r3 = socket(0x11, 0x4, 0x5) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0xff, 0x7, 0x34, 0x97}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) socket(0x11, 0x4, 0x5) (async) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0xff, 0x7, 0x34, 0x97}, 0x6) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x101000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:16 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xc550, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/133) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f0000002500)={0x18, 0x0, r4, {0x6}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x440) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000300)={0x8, 0xf4, 0x1f, 0x88f, '\x00', '\x00', '\x00', 0x81, 0x4, 0x3, 0x2, "7288519d716bd65170c5cb4e673e854f"}) 20:46:16 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x5, 0x19, "8f7fe123d403fe1bff85f1a26cbf66cbba0facdd5851d3ee86"}) (async) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)) 20:46:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x101000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) (async, rerun: 32) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r3 = socket(0x11, 0x4, 0x5) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0xff, 0x7, 0x34, 0x97}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:16 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xc550, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/133) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f0000002500)={0x18, 0x0, r4, {0x6}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x440) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000300)={0x8, 0xf4, 0x1f, 0x88f, '\x00', '\x00', '\x00', 0x81, 0x4, 0x3, 0x2, "7288519d716bd65170c5cb4e673e854f"}) 20:46:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x80000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x4, 0x61, 0x6, 0x1, 0x1, 0x8001}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001180)={0xbef2, 0x89eb, 0x5, 0x7, 0x7, 0x6}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4c4200) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/4096) 20:46:17 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x5, 0x19, "8f7fe123d403fe1bff85f1a26cbf66cbba0facdd5851d3ee86"}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x5, 0x19, "8f7fe123d403fe1bff85f1a26cbf66cbba0facdd5851d3ee86"}) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)) (async) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) syz_open_dev$evdev(&(0x7f00000004c0), 0xea7, 0x80280) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 20:46:17 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x6, 0x8, 0x3e, 0x4494, 0x8000, 0x8000, 0x8], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)) 20:46:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x80000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x4, 0x61, 0x6, 0x1, 0x1, 0x8001}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001180)={0xbef2, 0x89eb, 0x5, 0x7, 0x7, 0x6}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4c4200) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/4096) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x80000) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x4, 0x61, 0x6, 0x1, 0x1, 0x8001}) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001180)={0xbef2, 0x89eb, 0x5, 0x7, 0x7, 0x6}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4c4200) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/4096) (async) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) (rerun: 64) 20:46:17 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xc550, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/133) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f0000002500)={0x18, 0x0, r4, {0x6}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x440) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000300)={0x8, 0xf4, 0x1f, 0x88f, '\x00', '\x00', '\x00', 0x81, 0x4, 0x3, 0x2, "7288519d716bd65170c5cb4e673e854f"}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xc550, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/133) (async) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) (async) write$FUSE_WRITE(r3, &(0x7f0000002500)={0x18, 0x0, r4, {0x6}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x2) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x440) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000300)={0x8, 0xf4, 0x1f, 0x88f, '\x00', '\x00', '\x00', 0x81, 0x4, 0x3, 0x2, "7288519d716bd65170c5cb4e673e854f"}) (async) 20:46:17 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x6, 0x8, 0x3e, 0x4494, 0x8000, 0x8000, 0x8], 0x1}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)) 20:46:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x80000) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x40) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x4, 0x61, 0x6, 0x1, 0x1, 0x8001}) (async) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000001180)={0xbef2, 0x89eb, 0x5, 0x7, 0x7, 0x6}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x4c4200) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/4096) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) (async) 20:46:17 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0x7) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/61) syz_open_dev$evdev(&(0x7f0000000080), 0x10001, 0x400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:17 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x6, 0x8, 0x3e, 0x4494, 0x8000, 0x8000, 0x8], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400200) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x6, 0x8, 0x3e, 0x4494, 0x8000, 0x8000, 0x8], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x400200) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000040)) (async) 20:46:17 executing program 3: r0 = getegid() r1 = getuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = getuid() r6 = getuid() r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) r8 = getpid() r9 = geteuid() syz_fuse_handle_req(r7, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000000040)={0x50, 0x0, 0x58, {0x7, 0x26, 0x8001, 0x2000b00, 0xc70d, 0x9, 0x6, 0x2d66}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x1, {0xe9b}}, &(0x7f0000002600)={0x18, 0x0, 0x1}, &(0x7f0000002640)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000002680)={0x18, 0x0, 0x3, {0x4}}, &(0x7f00000026c0)={0x28, 0x0, 0x100000001, {{0x1ff, 0x1, 0x2, r8}}}, &(0x7f0000002700)={0x60, 0x0, 0x8, {{0x9, 0x1f, 0x200, 0x665dd0a1, 0x6, 0xfffffff8, 0x0, 0x2}}}, &(0x7f0000002780)={0x18, 0x0, 0x6, {0x6}}, &(0x7f00000027c0)={0x12, 0x0, 0x0, {'\xd9}'}}, &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0x101, {0x0, 0x2}}, &(0x7f0000002880)={0x78, 0x0, 0x2, {0x7f, 0x8001, 0x0, {0x2, 0x8, 0x1602, 0x7fff, 0x3, 0x8001, 0x23, 0x7, 0x2, 0xc000, 0x8, r1, 0xffffffffffffffff, 0x3, 0x1b58}}}, &(0x7f0000002900)={0x90, 0x0, 0x8, {0x1, 0x3, 0x21b, 0xffff, 0x400, 0x88, {0x4, 0x7df, 0x0, 0xfffffffffffff150, 0x71d1, 0xfffffffffffffffb, 0x1, 0xc8, 0x80, 0x8000, 0x4, r9, r3, 0xa5f2, 0x1}}}, &(0x7f00000029c0)={0x88, 0x0, 0x8a, [{0x5, 0x7, 0x2, 0xe9f8, '\xd9}'}, {0x4, 0x4, 0x2, 0x8, '\xd9}'}, {0x4, 0x7fffffffffffffff, 0x4, 0xbfe5, '&&\\{'}, {0x2, 0x6, 0x0, 0xdaf}]}, &(0x7f0000002a80)={0x298, 0x0, 0x80000000, [{{0x1, 0x0, 0x9, 0x23, 0x1, 0x7, {0x0, 0x200, 0x9, 0x4, 0x0, 0x8, 0x2, 0x200, 0x3, 0xc000, 0x0, r6, r0, 0x9, 0x2b0}}, {0x1, 0x1, 0x5, 0xbe, '}$#%@'}}, {{0x5, 0x0, 0x7, 0x3, 0x0, 0x6, {0x6, 0x3, 0x6, 0x6, 0x9, 0x10000, 0x7, 0x3, 0x8, 0x1000, 0xffffffff, r6, r4, 0x8, 0x100}}, {0x1, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x1, 0x7, 0x6, 0x9, 0x5, {0x0, 0x3f, 0x5, 0x7fffffffffffffff, 0x3, 0x2, 0xffff0001, 0x35d5, 0x2, 0x2000, 0x8af2, r5, r4, 0x7, 0x7ff}}, {0x6, 0xb1f, 0x4, 0x4, '/}#%'}}, {{0x0, 0x0, 0x7f, 0x7, 0x3, 0x200, {0x0, 0x1, 0x2, 0x80, 0x10001, 0x5, 0x4, 0x6, 0x1aa7, 0x8000, 0x0, r5, r3, 0xfff, 0x6}}, {0x3, 0xfff, 0x3, 0x0, '!-/'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x10001, {{0x2, 0x1, 0x3, 0x0, 0x5, 0x10001, {0x3, 0x8001, 0x7fffffff, 0x3, 0x6, 0x1, 0x5, 0x5, 0x4, 0x8000, 0x1, r5, r3, 0x8, 0xb91}}, {0x0, 0x15}}}, &(0x7f0000002e00)={0x20, 0x0, 0x2, {0x1f, 0x4, 0x1, 0x2}}}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0x3d0, 0x0, 0x0, [{{0x1, 0x2, 0x9c, 0x5, 0xd523, 0xffff3dfb, {0x3, 0xffffffff, 0xffffffffffffffff, 0x20, 0x0, 0x7ff, 0x3f, 0xe4, 0x200, 0x4000, 0x7fffffff, 0x0, 0xee01, 0x7f}}, {0x6, 0xfffffffffffffffb, 0x0, 0x9}}, {{0x2, 0x1, 0x8, 0x20, 0xb3, 0x5ee, {0x3, 0xffffffffffff855b, 0x1, 0x2, 0x53, 0x6, 0x0, 0x3, 0x5, 0x2000, 0x80, 0xee00, r0, 0x4, 0x3}}, {0x5, 0x401, 0x2, 0x8, '\xd9}'}}, {{0x3, 0x3, 0x1, 0x5, 0x1, 0x9, {0x2, 0x4c2b0791, 0x9, 0x100000001, 0x7, 0xb6, 0x6, 0x0, 0x8, 0xa000, 0x10000, 0x0, 0x0, 0x2, 0x1}}, {0x2, 0x7, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x5, 0x0, 0xffffffff, 0x5, 0x8, 0xffffffff, {0x4, 0x100, 0x7f, 0x4, 0x5, 0xfffffffffffffeff, 0x101, 0x4, 0xfff, 0x1000, 0x77, r1, r2, 0x7, 0x3}}, {0x4, 0x6f4, 0xf, 0x3f, '/dev/dri/card#\x00'}}, {{0x2, 0x1, 0x7, 0x2, 0x8001, 0x9, {0x2, 0x7fffffff, 0x4, 0x0, 0x5, 0x6, 0x7, 0x3ff, 0x0, 0x4000, 0x5, 0xee00, 0xee00, 0x2, 0x4}}, {0x1, 0x81, 0x0, 0x5}}, {{0x4, 0x0, 0x1, 0x2, 0x0, 0x4, {0x3, 0xfffffffffffeffff, 0x100, 0x999a, 0xa4bf, 0x1, 0x8, 0x0, 0x3, 0xc000, 0x5851, r6, 0xffffffffffffffff, 0x3, 0x10000000}}, {0x5, 0x9, 0x4, 0x6, '&&\\{'}}]}, 0x3d0) r10 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0x5421, &(0x7f0000000140)) 20:46:17 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0x7) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x2201c0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xb50}}, 0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x4, 0x0, {0x6, 0x80}}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0xd2a7, 0x6, 0x81, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 20:46:17 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 3: r0 = getegid() r1 = getuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) (async) r5 = getuid() (async) r6 = getuid() r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) (async) r8 = getpid() r9 = geteuid() syz_fuse_handle_req(r7, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000000040)={0x50, 0x0, 0x58, {0x7, 0x26, 0x8001, 0x2000b00, 0xc70d, 0x9, 0x6, 0x2d66}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x1, {0xe9b}}, &(0x7f0000002600)={0x18, 0x0, 0x1}, &(0x7f0000002640)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000002680)={0x18, 0x0, 0x3, {0x4}}, &(0x7f00000026c0)={0x28, 0x0, 0x100000001, {{0x1ff, 0x1, 0x2, r8}}}, &(0x7f0000002700)={0x60, 0x0, 0x8, {{0x9, 0x1f, 0x200, 0x665dd0a1, 0x6, 0xfffffff8, 0x0, 0x2}}}, &(0x7f0000002780)={0x18, 0x0, 0x6, {0x6}}, &(0x7f00000027c0)={0x12, 0x0, 0x0, {'\xd9}'}}, &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0x101, {0x0, 0x2}}, &(0x7f0000002880)={0x78, 0x0, 0x2, {0x7f, 0x8001, 0x0, {0x2, 0x8, 0x1602, 0x7fff, 0x3, 0x8001, 0x23, 0x7, 0x2, 0xc000, 0x8, r1, 0xffffffffffffffff, 0x3, 0x1b58}}}, &(0x7f0000002900)={0x90, 0x0, 0x8, {0x1, 0x3, 0x21b, 0xffff, 0x400, 0x88, {0x4, 0x7df, 0x0, 0xfffffffffffff150, 0x71d1, 0xfffffffffffffffb, 0x1, 0xc8, 0x80, 0x8000, 0x4, r9, r3, 0xa5f2, 0x1}}}, &(0x7f00000029c0)={0x88, 0x0, 0x8a, [{0x5, 0x7, 0x2, 0xe9f8, '\xd9}'}, {0x4, 0x4, 0x2, 0x8, '\xd9}'}, {0x4, 0x7fffffffffffffff, 0x4, 0xbfe5, '&&\\{'}, {0x2, 0x6, 0x0, 0xdaf}]}, &(0x7f0000002a80)={0x298, 0x0, 0x80000000, [{{0x1, 0x0, 0x9, 0x23, 0x1, 0x7, {0x0, 0x200, 0x9, 0x4, 0x0, 0x8, 0x2, 0x200, 0x3, 0xc000, 0x0, r6, r0, 0x9, 0x2b0}}, {0x1, 0x1, 0x5, 0xbe, '}$#%@'}}, {{0x5, 0x0, 0x7, 0x3, 0x0, 0x6, {0x6, 0x3, 0x6, 0x6, 0x9, 0x10000, 0x7, 0x3, 0x8, 0x1000, 0xffffffff, r6, r4, 0x8, 0x100}}, {0x1, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x1, 0x7, 0x6, 0x9, 0x5, {0x0, 0x3f, 0x5, 0x7fffffffffffffff, 0x3, 0x2, 0xffff0001, 0x35d5, 0x2, 0x2000, 0x8af2, r5, r4, 0x7, 0x7ff}}, {0x6, 0xb1f, 0x4, 0x4, '/}#%'}}, {{0x0, 0x0, 0x7f, 0x7, 0x3, 0x200, {0x0, 0x1, 0x2, 0x80, 0x10001, 0x5, 0x4, 0x6, 0x1aa7, 0x8000, 0x0, r5, r3, 0xfff, 0x6}}, {0x3, 0xfff, 0x3, 0x0, '!-/'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x10001, {{0x2, 0x1, 0x3, 0x0, 0x5, 0x10001, {0x3, 0x8001, 0x7fffffff, 0x3, 0x6, 0x1, 0x5, 0x5, 0x4, 0x8000, 0x1, r5, r3, 0x8, 0xb91}}, {0x0, 0x15}}}, &(0x7f0000002e00)={0x20, 0x0, 0x2, {0x1f, 0x4, 0x1, 0x2}}}) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0x3d0, 0x0, 0x0, [{{0x1, 0x2, 0x9c, 0x5, 0xd523, 0xffff3dfb, {0x3, 0xffffffff, 0xffffffffffffffff, 0x20, 0x0, 0x7ff, 0x3f, 0xe4, 0x200, 0x4000, 0x7fffffff, 0x0, 0xee01, 0x7f}}, {0x6, 0xfffffffffffffffb, 0x0, 0x9}}, {{0x2, 0x1, 0x8, 0x20, 0xb3, 0x5ee, {0x3, 0xffffffffffff855b, 0x1, 0x2, 0x53, 0x6, 0x0, 0x3, 0x5, 0x2000, 0x80, 0xee00, r0, 0x4, 0x3}}, {0x5, 0x401, 0x2, 0x8, '\xd9}'}}, {{0x3, 0x3, 0x1, 0x5, 0x1, 0x9, {0x2, 0x4c2b0791, 0x9, 0x100000001, 0x7, 0xb6, 0x6, 0x0, 0x8, 0xa000, 0x10000, 0x0, 0x0, 0x2, 0x1}}, {0x2, 0x7, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x5, 0x0, 0xffffffff, 0x5, 0x8, 0xffffffff, {0x4, 0x100, 0x7f, 0x4, 0x5, 0xfffffffffffffeff, 0x101, 0x4, 0xfff, 0x1000, 0x77, r1, r2, 0x7, 0x3}}, {0x4, 0x6f4, 0xf, 0x3f, '/dev/dri/card#\x00'}}, {{0x2, 0x1, 0x7, 0x2, 0x8001, 0x9, {0x2, 0x7fffffff, 0x4, 0x0, 0x5, 0x6, 0x7, 0x3ff, 0x0, 0x4000, 0x5, 0xee00, 0xee00, 0x2, 0x4}}, {0x1, 0x81, 0x0, 0x5}}, {{0x4, 0x0, 0x1, 0x2, 0x0, 0x4, {0x3, 0xfffffffffffeffff, 0x100, 0x999a, 0xa4bf, 0x1, 0x8, 0x0, 0x3, 0xc000, 0x5851, r6, 0xffffffffffffffff, 0x3, 0x10000000}}, {0x5, 0x9, 0x4, 0x6, '&&\\{'}}]}, 0x3d0) r10 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0x5421, &(0x7f0000000140)) 20:46:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/61) syz_open_dev$evdev(&(0x7f0000000080), 0x10001, 0x400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/61) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x10001, 0x400) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:17 executing program 4: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x2000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:17 executing program 0: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0x7) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:17 executing program 3: r0 = getegid() r1 = getuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = getuid() r6 = getuid() r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) r8 = getpid() r9 = geteuid() syz_fuse_handle_req(r7, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000000040)={0x50, 0x0, 0x58, {0x7, 0x26, 0x8001, 0x2000b00, 0xc70d, 0x9, 0x6, 0x2d66}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x1, {0xe9b}}, &(0x7f0000002600)={0x18, 0x0, 0x1}, &(0x7f0000002640)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000002680)={0x18, 0x0, 0x3, {0x4}}, &(0x7f00000026c0)={0x28, 0x0, 0x100000001, {{0x1ff, 0x1, 0x2, r8}}}, &(0x7f0000002700)={0x60, 0x0, 0x8, {{0x9, 0x1f, 0x200, 0x665dd0a1, 0x6, 0xfffffff8, 0x0, 0x2}}}, &(0x7f0000002780)={0x18, 0x0, 0x6, {0x6}}, &(0x7f00000027c0)={0x12, 0x0, 0x0, {'\xd9}'}}, &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0x101, {0x0, 0x2}}, &(0x7f0000002880)={0x78, 0x0, 0x2, {0x7f, 0x8001, 0x0, {0x2, 0x8, 0x1602, 0x7fff, 0x3, 0x8001, 0x23, 0x7, 0x2, 0xc000, 0x8, r1, 0xffffffffffffffff, 0x3, 0x1b58}}}, &(0x7f0000002900)={0x90, 0x0, 0x8, {0x1, 0x3, 0x21b, 0xffff, 0x400, 0x88, {0x4, 0x7df, 0x0, 0xfffffffffffff150, 0x71d1, 0xfffffffffffffffb, 0x1, 0xc8, 0x80, 0x8000, 0x4, r9, r3, 0xa5f2, 0x1}}}, &(0x7f00000029c0)={0x88, 0x0, 0x8a, [{0x5, 0x7, 0x2, 0xe9f8, '\xd9}'}, {0x4, 0x4, 0x2, 0x8, '\xd9}'}, {0x4, 0x7fffffffffffffff, 0x4, 0xbfe5, '&&\\{'}, {0x2, 0x6, 0x0, 0xdaf}]}, &(0x7f0000002a80)={0x298, 0x0, 0x80000000, [{{0x1, 0x0, 0x9, 0x23, 0x1, 0x7, {0x0, 0x200, 0x9, 0x4, 0x0, 0x8, 0x2, 0x200, 0x3, 0xc000, 0x0, r6, r0, 0x9, 0x2b0}}, {0x1, 0x1, 0x5, 0xbe, '}$#%@'}}, {{0x5, 0x0, 0x7, 0x3, 0x0, 0x6, {0x6, 0x3, 0x6, 0x6, 0x9, 0x10000, 0x7, 0x3, 0x8, 0x1000, 0xffffffff, r6, r4, 0x8, 0x100}}, {0x1, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x1, 0x7, 0x6, 0x9, 0x5, {0x0, 0x3f, 0x5, 0x7fffffffffffffff, 0x3, 0x2, 0xffff0001, 0x35d5, 0x2, 0x2000, 0x8af2, r5, r4, 0x7, 0x7ff}}, {0x6, 0xb1f, 0x4, 0x4, '/}#%'}}, {{0x0, 0x0, 0x7f, 0x7, 0x3, 0x200, {0x0, 0x1, 0x2, 0x80, 0x10001, 0x5, 0x4, 0x6, 0x1aa7, 0x8000, 0x0, r5, r3, 0xfff, 0x6}}, {0x3, 0xfff, 0x3, 0x0, '!-/'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x10001, {{0x2, 0x1, 0x3, 0x0, 0x5, 0x10001, {0x3, 0x8001, 0x7fffffff, 0x3, 0x6, 0x1, 0x5, 0x5, 0x4, 0x8000, 0x1, r5, r3, 0x8, 0xb91}}, {0x0, 0x15}}}, &(0x7f0000002e00)={0x20, 0x0, 0x2, {0x1f, 0x4, 0x1, 0x2}}}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0x3d0, 0x0, 0x0, [{{0x1, 0x2, 0x9c, 0x5, 0xd523, 0xffff3dfb, {0x3, 0xffffffff, 0xffffffffffffffff, 0x20, 0x0, 0x7ff, 0x3f, 0xe4, 0x200, 0x4000, 0x7fffffff, 0x0, 0xee01, 0x7f}}, {0x6, 0xfffffffffffffffb, 0x0, 0x9}}, {{0x2, 0x1, 0x8, 0x20, 0xb3, 0x5ee, {0x3, 0xffffffffffff855b, 0x1, 0x2, 0x53, 0x6, 0x0, 0x3, 0x5, 0x2000, 0x80, 0xee00, r0, 0x4, 0x3}}, {0x5, 0x401, 0x2, 0x8, '\xd9}'}}, {{0x3, 0x3, 0x1, 0x5, 0x1, 0x9, {0x2, 0x4c2b0791, 0x9, 0x100000001, 0x7, 0xb6, 0x6, 0x0, 0x8, 0xa000, 0x10000, 0x0, 0x0, 0x2, 0x1}}, {0x2, 0x7, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x5, 0x0, 0xffffffff, 0x5, 0x8, 0xffffffff, {0x4, 0x100, 0x7f, 0x4, 0x5, 0xfffffffffffffeff, 0x101, 0x4, 0xfff, 0x1000, 0x77, r1, r2, 0x7, 0x3}}, {0x4, 0x6f4, 0xf, 0x3f, '/dev/dri/card#\x00'}}, {{0x2, 0x1, 0x7, 0x2, 0x8001, 0x9, {0x2, 0x7fffffff, 0x4, 0x0, 0x5, 0x6, 0x7, 0x3ff, 0x0, 0x4000, 0x5, 0xee00, 0xee00, 0x2, 0x4}}, {0x1, 0x81, 0x0, 0x5}}, {{0x4, 0x0, 0x1, 0x2, 0x0, 0x4, {0x3, 0xfffffffffffeffff, 0x100, 0x999a, 0xa4bf, 0x1, 0x8, 0x0, 0x3, 0xc000, 0x5851, r6, 0xffffffffffffffff, 0x3, 0x10000000}}, {0x5, 0x9, 0x4, 0x6, '&&\\{'}}]}, 0x3d0) r10 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0x5421, &(0x7f0000000140)) getegid() (async) getuid() (async) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) (async) getuid() (async) getuid() (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000780)={0x18}, 0x18) (async) getpid() (async) geteuid() (async) syz_fuse_handle_req(r7, &(0x7f00000005c0)="5f8d0085801a2bf37e678bf2da6e038ffa46aa79129b65eaf0881197f2f6b64791dddf745533a3382c1de01e06d51bb14fc6e78aa41e4aa1d1689e7f5445441c9f29814141002b26739e3d313fbfe1288ca9d752fe4947c40a2020625ff0cca46eccc4f3eb3ddef952b67ea1e4fce50996d062effd77cdf118ec56a7397cc80e2c539ae852a0e786f68ac8d6a36a3e83e6884da4d80cabfa96d37593d482d006f940e46ff5004225a02262ce949ca168350c3d5e1f2fb7513d57fad75aeae0342ef3211fef045b71a91bffe46be8c5f4be764710a3db10077f4fdb2f77c95bd0f580fb57a7bd5d5f63fa15aa3df7d955fb6bf9ecf74b6d51eff2aa9061e202a5fc2d744e7d97f539b44ee8419533b336c9fd355fa95acf2f7d257128e779f934ebfd5f355d6acbbe76e6dacd1baa73e1104c953ea4436e6cbf9fbfa931a62bd9f5d54935a20386ab364924aa7f64040163eed32488eeecc3ab8671ed8d4c995f2c7048ccffc8a7848eee4f03a4c06b996b7c1c0396cb9741329b11506c401008bbf60e8addfa3cf7cb8e9a259fcf20f95e0e9fe46335011c555ad6ca15437937c50b81c08279495df05783990549db2aa07402974139c10f988a5eb079f94003dadfbc9db0908a8479d512e27713b8859aa758383084db6b25d732d26995ad978e6b1d8c62ba1dd38594774e11dfb884124cedd575a9c9538050ee4bc8a6dec866b1eb7e2dfb3283b680b427a27c006ed70684547fed60a1a3bb11981cfcb796a7c7103e9d330abe1cfaa82094afbb18ad245f2d1c78b29012915ba2eecff9da6e7a2af20cee9837212ea84423ab6833253b89eaf210941cbb47297400026e638f6373533fb3e16b2a37784b5b90dc93a6d6ea5b6764b2980d9f8641f95b08fc764af072363a03c35e12ba172588f15fcea281b3a9279c0e5f6a0def6ae3ecbf22df4fe0e48e5c74ba928c168af76b06e19d5d7f09ca3d547d10b9e289d1ed4af66467eed51f3313c5172b43ac5e03d7d33dcfba147e81a370cf7d4c5f4022e5d9348faad8170ad1f5eeadd63ca718941fdb0ff5980eb4b4a6fa284cd1e2e6b2c4f6bbe3d6b8cf6975e21e83e8690e13d5a3100aade54c70dbb1580e1283b02e61f9257358db5f09bda2a07d80e1f0760deed8b31aad3b8a0df72920eaf080b199a97c06eb79d8168a273b9999c824f5456866223e7940882accbf0a2626506460998a0681e84a486ba389bea8b3383861c4c21dae0ee35f909c5f60c455c4c891050c47c63323297ee76da1eb6d3c19480b8894b5a5a7c3621dbcebbe5161e73517d824b62fd2d25784148d546ee44faef604d8cfd05207fb2b8019632356987729695c48b14fcc43cc135ea3f56a58c61368feb96c6065aed7679883bc66becee2c8acb451754d320bf41c1b803981f37819f3e0da34602cccb8c31ab6dfdea0a09c926ee26ba40b29942d95ac0c8626c78efd1d98c767f4d493977d286de9f29241c19a3869c646ee94d022cb084bd5b93155f8344685e1ef740a132e797ee12a7a3b6d3781c01e85463bffa27492fd877ef2b0b4cc58667973043f77918ba731e7941d71fdf708def362862694286ae4ee0af4e289ed047d3ba5ba5f4adf0071036050b8ccff5939bdf40f806e72ecf03328c078c335bbda8a5c70e547aa9372fe95834eddc9f20b61e09626848722be02cb344b4c8e1980f8148fc3d274b2214a438bb13c7d3e7477dba93fb7fc6e6185d0c1fb495c6cc90e0db9acf1e1a3b7859f38bd30bf7869ef8c20751b35614f9571d4505fd5b840fb5f00083f5c614359fd813c4feff2b8e243ba85bdc07bfd20a55cac37e9b5c40c1eff83f602eb8eb5631c50ab8d7f20173ff580004027c24c563f1cdbda95c33af41044b0e18065640a6d02053c738ec5b1b22cc3985af020134922eb27bb47d2171de6543989b96b55aa7f1e423b85fd5b6d4e8b662fb83b94796ae1d8a960ed06e53755f622905846e554eb4790a5fbbc87aad557ced8241d0e8c42daf78359a7e48f31081b69f71fa2988f4e5cf773242495db8d13fa943c0fc4d60795b1158806e78ae421adc584b37e94b832a23fa1c8c8fb3338753ff8526e10cd199ed43c316e0849017aa84b04e425c844da6bfa7af5c53aed2c4c3b45df8093dc3454addd825c514d3a734ca1a722b659cccd50cee557ed52651b28ced4444a1a73d14567101d34eae45a6957ab797ab5c822b0136adbbd16538c6fcf7db65a64e6b89bfb5c3fce23ef6e00a7b56a0ee689e056744ac5a35a995844e4a16232082c52df68910a6339f6828ef5b5c7f7514f7568c32a6c7a0118b689ed71e71317ce1c7a84da377df87079d6cde33028c63d310fd1ed822baf54e5517b2cd9cc3605af0eeb0129b682481392548f4c61603dbe594959222f909a5ba8d46ff1f6c8d0fbb29cb62183bffa8eb2ad0cbbdee689139bae9b10f5c90fb7b9663d6c98356e48f90013a8fba43bd690b11f6e6a06d692e3bca0e1f53935a368c4c71ae0a2ce36dce0c2a059adebc1cf8922a8729e3e15ebd3620a7f0f5005a898ed353c3752e15c13a0590a0f9ca9a7d90a5183be924f7b851e0d8c9570b51c64a007e544c4d6dc5c044b7f749bf3c42c003c2ec35373d9101792a11eb9614251068a224ee1e9e15eb3a626e6b396da81339055ebeb6f0c65255285615a9cde3b2d9e7cbc5e6d74ebba2d5808b77bd3da99fe66332f0e12fb851b5f4044c6b9f2a9bdc6ec0031415381cf0290135f525380684c5bfcb7623aae9a83a6a35b5cb440b708a93354dc3f9e92ace8fcf00527f2b22d7bc52b6901271c503bfa8f081c8fe5653fd38ff9d30492328522569c0e5284fc3e302ad0a4d66b76d4c959e41cf4fa65ed607e7673eea8fd5e31544501531677d816f25b71bb50b4534128d094602a3d23b3c61cd25e462b2cd5d4b9262ca567df76f3aa250fd492804f95fc15ead76b2193ce80e98e670e073ebcb90189694bbfafbe50d1223f38abc0d738a4ac9319631801515c6d68e0db910602ea74bde4ef1b32b7c6b5a1f98c02db64aec67eabc8bd31d61d83593c6abbc4f38ab4a85444df0f81dfc77743ab95264a5190f4634debca0a6f3a533e4eae456e6e5db7a450cd56a58c1925299ce95844f4b6b37179addc1ff34512d47a293151117b3809581e9b1806ac1994c49f85dd760f05c9fc973fb04339a515c0b5d05ceb4db7aba270e261e7552f41876b73d1c9e71fbb02ee3e15d1ce8ceebfe75cad7469565aa2abbac8cf951e3997b9d928b5f34ade47d4c98e11923e0faee2f4d6dd4f3f11c7374f75b7e353103ae38e3af793c5dbd52770f4bdcd0b79ce56df471b8354de42b4778b20cb83a143aba780811b6a0c1af68b9e13727bec246c90615b4d1e31587803d4b366ec7830e13a9ef01fb0f536d178455720c0b09636a9b56fff493d3d1738b7f52a10efad1fd82894929aec181abb6b862a46ebdf9e5a524b8ebfb8b7c1c5db2101dc72f8b0f19774f97f058639aeb55933400cdc32c3d977850c9e5ce8ba424445ca732e16086d7fb0f7f467c69387d23404214b3f725f77757639f90aaa3b355f98e55a876ec305a913a3acd4b236e3b658bf55e6bec75231347ab8b95079c46b5133911b4411ee2b71ff8ef788f9666241073587be011b6720c5a3733dcab52ee37a0a3dea1165c2b47ee4563022794a16d93391809c8d7c90030b00f815ca2944df42273afb3c16e9413ec02bea7ac9c8e1d398f1a8d4979242220c51fd5a6326ce2e4d3d24c1858b42e51f94d532fa92184d049b60ca95878f6c297b9d552bb240ff2c32bf9f476a6bd00c9822455d39182d69d8d9b2fddd599bd66b8c8ec563f1abb7d7fefedea722d0b81321498ae2b704feb2db0b32dd6e21b8f0756afa2ccd0eb89772a0f630d55c8ebed7c59e82352ff209922227043cd37647724e4a77b0b6718ac4ef6cd8c324c4141976899ee7939ff5dd20bd4e6470037a3e5008e0f5a8ae2ab27d05a2ad2895d843bed63fcc5cc26d568c2634c91d290f8fa67ff606a6bb65351121301c5de32380035b43a32fdb9ad65f1d6e57efc6b81778a88c9d45a6624984ac3892f14a16c9e3571703c79fd4ae6592718bedf989fb8098035f9badc0a69c1e76da17eb9b62909873d5b022231b730196527a35954cb9860bccfcdc3f92f48f705db7dc1e396b60a48096df734e43f325ac204798b9edc8ff7dc3d4e959f51c09f84f27757eff09b1885e3b18324c1d10009bd48cc688350312993e9ca2fbbb27133f99fe48952babc303b76d0671e9336eed9445b402d68d2f54071b9e24bc131c578ee2cd9d9435574f11c3d552af248f85ea9f361b52fb969785366ad7a0c3d49d1fb8d4719015bd286c87a2378aa4ff95e2d71c8989496ee26530ec06841a9c8fb1b0e2c3aaa14145191addaa875a2a27071f59df9b409d2b9e9ea07f72c11a2ca1fd9bced168e184036eb47bb826f04b41c4da35358aa81e0cb0c3dad791ff8376f3ef5ec2a038e75aafdb0dbde31a4d54b6519073137d129b3389dd287f7ba8ab580e96cf603e5d7d79cc0f84927c5eaff2e862af40e7a7d1dbaf642c35646d4b311283b6aad215b47dbef1875f2b04a124cfe226d8dfd59c5fdab8d75ff61f30a9bfc11a4e5116349e6738824b943dba375373486babef36760c4edc55037b85b78a113beeba982de1cd9b0216aff3c21b71920086e10e260fc2b4fad1f547980ce8c1fd0aff944960429cb40ee48d8d9423cf9e5d2375bfde2798685f008d54ba9dbb0cbe7961ecf752140ac1ee12d723ff2c3b5b58b3d0dd0a49834b7fee3b2195e37e83d43c207cbf5dced6311ea7e04da4afc6118faeb6ebba1e654f85248582b17501e76b8b623dea0ea1af299205996f54c846f34d8fc0fc3eda40fd71d5b9acd4174358ad7192a74b806f4260c3d0b7226ca5e4c0c6fd78471784c77479d53f79b307867c804042d5b8235df647b1ab86164580d55b19dc67617617a004b56856fb8901f9b7d3db4f29da2bb47d6246cce74b2d56c793f6a9e003705cf4a3b318c9028b6384ba007389764b133fa55310b9b18f8287d6eaa5fa66d668411a7a4389e41d27585cdfc5fa6dc9d45f941ec410a33d31ec5bfec4c84e7d8bd52a4e7b6161dbe3c64f11ccd74c95d208bd73483c13807d8a1c0f2727187cf5a4c0946292aa6977a62fb96e12d0698d713de7df141a59738a546020a27451d67b52ddb96cee7d1751ee765e1dfb315d410f0cfbe4e34c9b7769c205aa3060d974c84411960e600e2b3a48576801481ccab555ec7142e1f74df1056866ad103ffc91a22004f0a9527442b59f3862c68b4faf0bca22d11337405a18d4d53b9950e6a5734bbefea02fb169d7c081afcbcdf195287bd30e24358394fc5bcad28583c31332a70a45c8a722d71789253eb363445752f3ff70d36613e9e636d7f7c17d25c25bfde3ce660c40785e4ad1ff07fb37234052225f817c0110333fbb1a9d739420af6d1527d8dc9824de49580609b5de4972ba27519752ef142c67d052d24d5d1af96103d541624a261f25d71ada976636c11a43a0d079395a2a8b645a697576323bf1dfa964bab627096e052f02e5fa4af03bdde2ae5b3fea56d55fab4fecfafc1ccb7445d044ee8b7483f3bd0784d9a1049f694ade3d1875bd93d6563c6ab1ae33d8c1ae625eb7abbfdc9a8454f18da0416931949f5f3e2f601beebd874b0e01250cb18d5c76752a69b983fece9eea55fa3c92b24b30f0aea7b1017f20a0879d693fbe2cbb95c82ae07dca0c3348547b369e4cef068fa49b1e2e0dedb32d3884d005fb86ed54a755bf9e5a35ed092fd148714364a4c1261de0c0c1e99f0bb09f7a3cdb24593850dd5f5c1ae7ce1ad6dbed97b8437d9f708fcdbf4cc963fd5892613cbcb2b41c0cf088b6dd1b6511f2b02bb2139257c83835cc1a8bae821cb2e17a4aff60c729d5191f24f82d2ec80a95f74b951dda5115b4ecd2bc83bad71049c6519db8c575ab51b62d22f57e58a96e4458def5c25b60fdb39b9b6fb3ac446d03964ad3c1856dd2e3d0643fe4aea7998d47f31a22edb217cc6251eb5bd0436b5aad57aeacf04db58d7e16201ac85a1afc09f0fe29d4df372f14e9e4d842672e67914af2c0776a390510b2499ceb55dc8ada82a0240886ce92472adb4c2fdaf79b3b8ff6427ad15a3b5791d47802dc434ef2d70fbe2daebf2994daf386d4afa31c0770e394562afddd616f8cb690a0d81b4d4a005adccd4d38292f9f6b922e0882f8dd80eba0778718f3fdff2ca754ab8661ac9018c706f22660ad9f988bd34ead0f817a9e9841977f9d1992a9ba3ff3349daa80ddc9390859db3e96a1c2e9ba020d726dfa7375f4fd45d8c53899218303eda3340ab58ad8b98780f442db73a2cf482d20570d827f228bb676071ae2058846371a4cfbdf975d472acdb55be1e38a6cf058d4d815bb86d19153d1561b33a6378f0609ecdba48aed29660d15c476e5714ec042176054bb23d2f168b1e46bced0db2930d9ec28ccdb67efb44e9988b54b89e4ffdbb446aa2ccc7fccd9d01b60ccd02e5581aa32762a15181f860301500080338533581878ad93a892702aa9dfaeb9bc138504d2aedee18f2c3e2e0a18d97a05952206adcb033662e8bf0e65a7cfe8e30f903b95b626e0b12c652c25b181e89ae4bf1dc59180959ba8c85c1bc0f073253bc5b522574086b99e595aba2f10c103b82ea6996573c20db1779dd752bb51f00d6a0243b34a0e3cc3912b82bfc09f575117a5128e96a2e505348b9e55e3da85e990424e99ad393992b9fb5d5088a7ff432215ffbc56755896c0f1d92f1f8acba9ea8c018d42544c2be1a0e18543ef557bb43e92d2ace2a7bfb68309cfc466111ca21414ef5792859dad1fe70218a39dae9dabd0f8311b4c9d5ce727d0a965abd2b1f380a8fb18284f0f442ac9b87a7c1fa33638b08c4a2fe07aa1000a40fea908656b872c62926bebfa9f913b29a17a337ebe09e361287d7a811ab8e49a7a9e0e1cf099f5f5de8291c3b6a9a136c52a5ee1ea77ed48fa59b309a97b188891a6c7927f465a6b741c70576b792230d4077b66c29384c7cd3d4a3e32750879101bdf867cdfc394132da0e08020cf2f3b3c9084f11b37b14a3be4173db1e46c50b71f570acc723c353b70d98339add65d791e2b27c2ecb340e2f3d2ad30fafa0885c97d2b6edafaed161b7f7bf4e6a28d843f1fde8a4666088de54c65a3ce2878fa0a068cf71952a1248332595351fde4bd1f9e22379fa6cd99a080b2a72e3a33f0998e35091823fed0a87f3f7294c1013a83e76d79513a4fe97e6a43eb6159be8469fb47c125daf35745a5f18771590141c068b926aafe53fa1dcf666e621653d1531fa78be54b50ddcb140ad0046e7f797ac2639bc6c275ab5c62de167671651bac081361a102601ae0b70bf97c98bc16da1faaf7f4ed13078d9a014a28dcece78c803971726557f97b79484b4f827ea63ee63347e2f9f7fbedae4527efb7134bcccb1aa842176277a0103cee33cc0634773c1c9b4d08d7de03cdf4432a21fb993ed44d7e03736dde3c4e8cdc40bcfdc1b3701690e29c089e8eb957cdaf38929aee426292d455a2cb1e11cf24646d80c912af181b8dbc37a6590fd0ae362c83ce4d62ecbce5d8df60539bde022fd53a7712ae8df25f8d7c959199596f921e8cab2410e8fbbca6867acb1f4bc92f51ae3a39a78d1a6d0882b20ec8afc04bd76b1de4d57da97d3d84f1a83cb6688705b4016ffef0a0bc0097ee39b23bda7a6a19522b6e420b97deeac4bba08ca8cff1ee85bee240c4eeeb32419481b815397b41c57c45a7d7598659fe012d2b3c74c95620664a891cd29ae2d27b96312de6c9218cc32f7f293cc17c88bea457e65eb5e2712cb74207f03d711680498c5477c472cec7f6837707c12548366e471774fe2977ff0167d145d1b1b71d6ec3945551d8dd472f4fda25f5c9a87e0ed926fdea75221ee05d9a431e9086e25bc3b391b425a0201c7c8b57c3f7a87fdc487e8494a5a1f97524d87025bbd33200ccd8fd385a03f53e1d67ed4da497140c8d40111fa2cbca039a2f62c4336cc630c319f2a74bb840c69ea66c0e2c05e4671b00be30958abb060c1c504bd724725ae3e4a3bbf64d90a40708c3bbd13f6d7925cf9b7ca49d3999e79445e6c8692ffe8bed018d75578106a3669ee14377e78608296f3abc012e366c52d5ad8176ce679b8d53c79aa93f0dd56e682278ade68667369c66439c4f26ca45ebb26cd8eb9dbacd57c3d08e7a4018e309515751ce8c4308ec34db4cee72ee78641bc8b2e238b96ff461e6b5f73973d9369dca2c3066ba1317d4f716c37b7632d41cf0b756c436c9de103641ee3888a0b1a69631971f4af67f97e99ddc3db7c9942fa2fb76742073a0802de47546f3284cdd04f721bfdd0c95fafa0e730bcfff04f5eb32516bda3c78a3b9900e2d966e840590517e9555278772715d6859e12c62a4b58614b516522c41ffe3eca8c3f2f52fab2bc0515d13badd3309fc1d9767963f5062d9c6e8b7ed2827c9ad2294a43bcc6193887ac7bb3eafc8affe0e20116e2093513f96475401da58a0d7abe0ea90599f29b284d0239308c909a830ad926fff11b1602160e1a0b5b86f0a92326224d576277977458abe45498f70bb0406cf3b92ecd286a27c842ef95792954947ffbd19c9df0d742d384a814d0081564574196f46c36293a0dc3961bb4542a5b3f350a5af5baeab947ec08263f9313f78dd22bc177a2374c1bbf265b19360b4bf8ab977d86abd8c9571c9f72de5dd1839f9fd952166e553335d6dd7423dc3e6f4f4ce9d6a412a92d727edc6d8706bc7d98d148b73ad4149e6dcad12927ae5e439f05a4d34635d349ae6d2e2f85811803317b003dd2b8c295a4c15e028471a8584b43ad7656f6706f9d78ff4f2cd4751f7686e3927c44b94b9628a6808759db58d209b2678b95b970585966513a7e4c73035677d1284956973df8a5659aeaf38704d403f7e2a86f1fc5d4553f108f2267849ec3fa62605654617349dca951421a2e813b37973dbaf11b74030278effe81ff58033e7317b9bc8f5d3f4c15ad6f0be68ecc655cc2b982f0620d5b0e1108890656029904c167c03584e4ffca3121549c935748aa3bd2c61f6963f532381d919da536c5911232d80f6587fee6659b74fd6c42ac68720f86b0755849bbeb4f5ba11e585f42f77f470e85d2fb410f90c798023452392f738c97ec54aefcf32ae79699255c3a984d0d41a14b6583f4c3acd111ba8249d0999be554623533416198979a06d28d149a47f9d9020022063b6d5fcf9c0b7bd1a721c2cd4e8d16257ca1831d5223b2ed0aec446847a52bb6ad6bd60e1923e63e1a92450129352764517ceb09da31945133dde25850e00139d966144aa80c720eec0a4f6dfe39cd9b6258fc37c64f310ba2fb0ec0fe107d36ee9787994aae66c019f2fd0bedd9cf108695fbd799e27772d0c39e5be8fdf421372ad66dc88a30892a03b49a1dec0b7a719e5855c224610453ab08fefeed1e96dc9d8d6f41d4b67855066cb77a5806fbc9f2b68460aed291bc1d5a46810c9de6368e90ab694e0a2da0b72316ac028e65071e99c3c3bc04706b9f3bbe476de5084f13932e06bc0813519429d12419c36588633caa63d0e0af03cf72c2c8861171a0b0e57170aae536321cb6d6368916ee83d44ea876c6df907014fc93f6663b64691bb727f0a8598626b9596297cd2633c9eee6d63bfbeca8d3cf539303adb6dfbc9cb09870213804c0d146e1978db486494ffd07ed14513b5a7232e5ee8593a8e44452beaf41e4ea7bfb447522388eb9a9f1fe0f7a72e7bd6747eb926188b4c2a78b6a0fdf8c8ad682a6a7e39b097d2698cbc99a682aea86dd8b76fe66c73d4d94a01f838d69521bf56f2f1bf177dd0d18dbe590adb4ec7034e4539c03800575f7a07182f9bd718c24bc8f67919f2da66f4cd4a3447e1f61edd63c18067643bfb9a3b1f10c6de7e7367af8afa379a60299dcb8c9e3a7ce3aeb60f9b1d00a8f5eda75df8f46dc42f025c434cb0c847160cd41cf3dc0b392547d409299c18798a7a61bd672fabfe6531d07f14132e369564bffa4dc842b309693685a94d82bc1f9d09af0a16875cc8634c913b5d846ef28685436b76afd35c24ccaaa58f1c983fff3a90f890358f5f86d1d4f7172f4ab004a6761b4d2522effd6b0639c1a4def3c258ff0073350a1025fac4904d798fd163f8295443163edceb464ff08d3ac43568cbd066196da39c6911ce975382452afa690e7e5d2be64f51704302d2c6eaebba4a065303f0484f67321e04175d2908c0bf3881b656120525fb308785595c064d135baad2d74f73965926059f401f0c54e01f984157d723b924f79e79cc2108290274bfa9eaa20233158286409d706595190fa303e196dff1d800ac5d7aa6aa7ef6dfd388bcae1431ba0674eac5fecafc64fef9a3f0f2051e258b648bf17fba869df2dbb988c4e923abd498ebeab814a5d1d4564725924d045a78bec4bf9b88fd95dc5a762403377ef0390e0e208a807c43241864fe2f9661d59a135d7ae59142bf19f525d2bd855a92022fb593071b91b1c662bf32ff974c1a34f5ca28e68b9a2f02b05657978be900b56968698229c9689c4f385f8159448c3f2d80acbcd36e3f94f8727b798e0f06b795255bb2858ad92afdfa326c1fc3e5ec451ca2a95381765f367a7f047b2f907a69371d2cc69209ad012d8080bc4b4ec90c711315f85656d8576ed778977aab15b6b6f69df395e85b7f9bf7b2a651794e42bf40f4d0e09d323e3edafa582ab9ce7ac64f550d9f4c40131b69b2cdf2947c87dc4e00fa6438840fc0816e666dcdaf869c2651a857512a9115366c739f3346f19994e0a6bb02cac8c30c5494a948a729860bd5a85c1a89b866b04a4a0c8719d52687aa05e23aab54c363636066e1eaae41930f4a513c0de238d8dc27bbe03c4fb272b2a52540bbdcea1bfa63e3de569279391a6d10dd9a78602ab4bb5794a5448601a8816359602c84c7be072b1884575dcb5dc17ae55ae11d956b77f9153f7839044e74dd8ad99e3305429219887639beab740d4caacaa34db95cf0c27f8007a3fb529592636fc76fd11ce9cd1ae51c8fb73e0f6265d435825526ca07bdade77da1e1573d9c3c5e70e34719d96f7d659fe849b48f191fe89551df1f545b4153d42355a221faf613eb6add4927189a1cc8fb5a55da83d0c66697a4278a646c2852bd2f7babcc10d37bb838a08821b9878e09fa75c0cba5cdaa5aeb466daaf404a32cb6539f3bee117514c47b0512fc049b2552a76ae1334e44b6698185f245769fc04e96e84417c76afcc200d3907827396b865877f99603017c68febe5c9c1b5114c11802ec38109d636232ab91a2b365118225c48871c52bb35e1fdcc52be2d2435d9f8194da7fb4db1ac509fb45f50c411fdf26a4ec98d0339c8fac4e7d4161a5360f3c4e5b21fae44445f077e8e97026241bfd2eb2a826f02a61750d4866c94c8bad4ef65d47b1fce335d0bf53d3432f26", 0x2000, &(0x7f0000002e40)={&(0x7f0000000040)={0x50, 0x0, 0x58, {0x7, 0x26, 0x8001, 0x2000b00, 0xc70d, 0x9, 0x6, 0x2d66}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x1, {0xe9b}}, &(0x7f0000002600)={0x18, 0x0, 0x1}, &(0x7f0000002640)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000002680)={0x18, 0x0, 0x3, {0x4}}, &(0x7f00000026c0)={0x28, 0x0, 0x100000001, {{0x1ff, 0x1, 0x2, r8}}}, &(0x7f0000002700)={0x60, 0x0, 0x8, {{0x9, 0x1f, 0x200, 0x665dd0a1, 0x6, 0xfffffff8, 0x0, 0x2}}}, &(0x7f0000002780)={0x18, 0x0, 0x6, {0x6}}, &(0x7f00000027c0)={0x12, 0x0, 0x0, {'\xd9}'}}, &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0x101, {0x0, 0x2}}, &(0x7f0000002880)={0x78, 0x0, 0x2, {0x7f, 0x8001, 0x0, {0x2, 0x8, 0x1602, 0x7fff, 0x3, 0x8001, 0x23, 0x7, 0x2, 0xc000, 0x8, r1, 0xffffffffffffffff, 0x3, 0x1b58}}}, &(0x7f0000002900)={0x90, 0x0, 0x8, {0x1, 0x3, 0x21b, 0xffff, 0x400, 0x88, {0x4, 0x7df, 0x0, 0xfffffffffffff150, 0x71d1, 0xfffffffffffffffb, 0x1, 0xc8, 0x80, 0x8000, 0x4, r9, r3, 0xa5f2, 0x1}}}, &(0x7f00000029c0)={0x88, 0x0, 0x8a, [{0x5, 0x7, 0x2, 0xe9f8, '\xd9}'}, {0x4, 0x4, 0x2, 0x8, '\xd9}'}, {0x4, 0x7fffffffffffffff, 0x4, 0xbfe5, '&&\\{'}, {0x2, 0x6, 0x0, 0xdaf}]}, &(0x7f0000002a80)={0x298, 0x0, 0x80000000, [{{0x1, 0x0, 0x9, 0x23, 0x1, 0x7, {0x0, 0x200, 0x9, 0x4, 0x0, 0x8, 0x2, 0x200, 0x3, 0xc000, 0x0, r6, r0, 0x9, 0x2b0}}, {0x1, 0x1, 0x5, 0xbe, '}$#%@'}}, {{0x5, 0x0, 0x7, 0x3, 0x0, 0x6, {0x6, 0x3, 0x6, 0x6, 0x9, 0x10000, 0x7, 0x3, 0x8, 0x1000, 0xffffffff, r6, r4, 0x8, 0x100}}, {0x1, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x1, 0x7, 0x6, 0x9, 0x5, {0x0, 0x3f, 0x5, 0x7fffffffffffffff, 0x3, 0x2, 0xffff0001, 0x35d5, 0x2, 0x2000, 0x8af2, r5, r4, 0x7, 0x7ff}}, {0x6, 0xb1f, 0x4, 0x4, '/}#%'}}, {{0x0, 0x0, 0x7f, 0x7, 0x3, 0x200, {0x0, 0x1, 0x2, 0x80, 0x10001, 0x5, 0x4, 0x6, 0x1aa7, 0x8000, 0x0, r5, r3, 0xfff, 0x6}}, {0x3, 0xfff, 0x3, 0x0, '!-/'}}]}, &(0x7f0000002d40)={0xa0, 0x0, 0x10001, {{0x2, 0x1, 0x3, 0x0, 0x5, 0x10001, {0x3, 0x8001, 0x7fffffff, 0x3, 0x6, 0x1, 0x5, 0x5, 0x4, 0x8000, 0x1, r5, r3, 0x8, 0xb91}}, {0x0, 0x15}}}, &(0x7f0000002e00)={0x20, 0x0, 0x2, {0x1f, 0x4, 0x1, 0x2}}}) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0x3d0, 0x0, 0x0, [{{0x1, 0x2, 0x9c, 0x5, 0xd523, 0xffff3dfb, {0x3, 0xffffffff, 0xffffffffffffffff, 0x20, 0x0, 0x7ff, 0x3f, 0xe4, 0x200, 0x4000, 0x7fffffff, 0x0, 0xee01, 0x7f}}, {0x6, 0xfffffffffffffffb, 0x0, 0x9}}, {{0x2, 0x1, 0x8, 0x20, 0xb3, 0x5ee, {0x3, 0xffffffffffff855b, 0x1, 0x2, 0x53, 0x6, 0x0, 0x3, 0x5, 0x2000, 0x80, 0xee00, r0, 0x4, 0x3}}, {0x5, 0x401, 0x2, 0x8, '\xd9}'}}, {{0x3, 0x3, 0x1, 0x5, 0x1, 0x9, {0x2, 0x4c2b0791, 0x9, 0x100000001, 0x7, 0xb6, 0x6, 0x0, 0x8, 0xa000, 0x10000, 0x0, 0x0, 0x2, 0x1}}, {0x2, 0x7, 0xf, 0x3, '/dev/dri/card#\x00'}}, {{0x5, 0x0, 0xffffffff, 0x5, 0x8, 0xffffffff, {0x4, 0x100, 0x7f, 0x4, 0x5, 0xfffffffffffffeff, 0x101, 0x4, 0xfff, 0x1000, 0x77, r1, r2, 0x7, 0x3}}, {0x4, 0x6f4, 0xf, 0x3f, '/dev/dri/card#\x00'}}, {{0x2, 0x1, 0x7, 0x2, 0x8001, 0x9, {0x2, 0x7fffffff, 0x4, 0x0, 0x5, 0x6, 0x7, 0x3ff, 0x0, 0x4000, 0x5, 0xee00, 0xee00, 0x2, 0x4}}, {0x1, 0x81, 0x0, 0x5}}, {{0x4, 0x0, 0x1, 0x2, 0x0, 0x4, {0x3, 0xfffffffffffeffff, 0x100, 0x999a, 0xa4bf, 0x1, 0x8, 0x0, 0x3, 0xc000, 0x5851, r6, 0xffffffffffffffff, 0x3, 0x10000000}}, {0x5, 0x9, 0x4, 0x6, '&&\\{'}}]}, 0x3d0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0x5421, &(0x7f0000000140)) (async) 20:46:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x2201c0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xb50}}, 0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x4, 0x0, {0x6, 0x80}}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0xd2a7, 0x6, 0x81, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x2201c0) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xb50}}, 0x30) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) (async) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x4, 0x0, {0x6, 0x80}}, 0x28) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0xd2a7, 0x6, 0x81, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) (async) 20:46:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/61) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x10001, 0x400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x2000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:17 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x9, 0x100000001}}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) 20:46:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r1], 0x1}) 20:46:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x2201c0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0xb50}}, 0x30) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) (async, rerun: 64) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x4, 0x0, {0x6, 0x80}}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0xd2a7, 0x6, 0x81, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0xff) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1ff, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/4096) 20:46:17 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x9, 0x100000001}}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7fffffffffffffff, 0x3, 0x9}, &(0x7f00000000c0)) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0xff) (async) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1ff, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/4096) 20:46:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r1], 0x1}) 20:46:17 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0xfffffffffffffffc) 20:46:17 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x9, 0x100000001}}, 0x28) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x8}}, 0x18) 20:46:17 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7fffffffffffffff, 0x3, 0x9}, &(0x7f00000000c0)) 20:46:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0xff) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1ff, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/4096) 20:46:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r1], 0x1}) 20:46:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7ff, 0x200c0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7fffffffffffffff, 0x3, 0x9}, &(0x7f00000000c0)) 20:46:18 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000bb7aed00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x105400) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/127) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, 0x2}) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x6) 20:46:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7ff, 0x200c0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x7ff, 0x200c0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000bb7aed00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x105400) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/127) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, 0x2}) 20:46:18 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x0, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x8000) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 64) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x6) (rerun: 64) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000bb7aed00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x105400) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/127) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, 0x2}) 20:46:18 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0xfffffffffffffffc) 20:46:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x7ff, 0x200c0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x8000) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000006c0)) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x6) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4bd3, 0x1a1040) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/107) 20:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x8000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x7fff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="250700006bdafbb72b102d1681a9cf68d70e819d44d1c01cd0fa9cd9abd7a7eb3f23d3708bf2a1c3590f32baa8caefec6c1b8c6104a617716083f7e96f6243b53c66cabc9c1a5fa9c9f011ede7420229b9a49ef7c11aff7079f5708649aad343729baa8684914dca8651ef6f1173", @ANYBLOB="92fc151073d7e52d83121c826223163a5895ac89", @ANYBLOB="000426bd7000fedbdf250c00000005003300020000000800390006000000050038000100000008003200ff7f00000800390002000000050030000100000005002a000000000008000b0005006df31cf9545faf0dc34cb27606f8b1c0d2895dc24e18c9c9cd1c72bf5d06f524aaf235b90a07fe782c24c623574296067c5b4b78df920c33c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x101, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x107ffe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:18 executing program 3: r0 = socket(0x2c, 0x80000, 0xffff) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f00000000c0)=0xfffffffe, 0x4) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) 20:46:18 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10000) syz_open_dev$dri(&(0x7f0000000100), 0x8000000000000000, 0x422001) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4bd3, 0x1a1040) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/107) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000bb7aed00", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x105400) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/127) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, 0x2}) 20:46:18 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10000) syz_open_dev$dri(&(0x7f0000000100), 0x8000000000000000, 0x422001) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x7fff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="250700006bdafbb72b102d1681a9cf68d70e819d44d1c01cd0fa9cd9abd7a7eb3f23d3708bf2a1c3590f32baa8caefec6c1b8c6104a617716083f7e96f6243b53c66cabc9c1a5fa9c9f011ede7420229b9a49ef7c11aff7079f5708649aad343729baa8684914dca8651ef6f1173", @ANYBLOB="92fc151073d7e52d83121c826223163a5895ac89", @ANYBLOB="000426bd7000fedbdf250c00000005003300020000000800390006000000050038000100000008003200ff7f00000800390002000000050030000100000005002a000000000008000b0005006df31cf9545faf0dc34cb27606f8b1c0d2895dc24e18c9c9cd1c72bf5d06f524aaf235b90a07fe782c24c623574296067c5b4b78df920c33c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x101, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x107ffe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x7fff, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="250700006bdafbb72b102d1681a9cf68d70e819d44d1c01cd0fa9cd9abd7a7eb3f23d3708bf2a1c3590f32baa8caefec6c1b8c6104a617716083f7e96f6243b53c66cabc9c1a5fa9c9f011ede7420229b9a49ef7c11aff7079f5708649aad343729baa8684914dca8651ef6f1173", @ANYBLOB="92fc151073d7e52d83121c826223163a5895ac89", @ANYBLOB="000426bd7000fedbdf250c00000005003300020000000800390006000000050038000100000008003200ff7f00000800390002000000050030000100000005002a000000000008000b0005006df31cf9545faf0dc34cb27606f8b1c0d2895dc24e18c9c9cd1c72bf5d06f524aaf235b90a07fe782c24c623574296067c5b4b78df920c33c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x101, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3ff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x107ffe}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:18 executing program 3: r0 = socket(0x2c, 0x80000, 0xffff) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x800) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) (async) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) (async) socket$inet6_udp(0xa, 0x2, 0x0) 20:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:18 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10000) syz_open_dev$dri(&(0x7f0000000100), 0x8000000000000000, 0x422001) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10000) (async) syz_open_dev$dri(&(0x7f0000000100), 0x8000000000000000, 0x422001) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4bd3, 0x1a1040) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/107) 20:46:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x7fff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="250700006bdafbb72b102d1681a9cf68d70e819d44d1c01cd0fa9cd9abd7a7eb3f23d3708bf2a1c3590f32baa8caefec6c1b8c6104a617716083f7e96f6243b53c66cabc9c1a5fa9c9f011ede7420229b9a49ef7c11aff7079f5708649aad343729baa8684914dca8651ef6f1173", @ANYBLOB="92fc151073d7e52d83121c826223163a5895ac89", @ANYBLOB="000426bd7000fedbdf250c00000005003300020000000800390006000000050038000100000008003200ff7f00000800390002000000050030000100000005002a000000000008000b0005006df31cf9545faf0dc34cb27606f8b1c0d2895dc24e18c9c9cd1c72bf5d06f524aaf235b90a07fe782c24c623574296067c5b4b78df920c33c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x101, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x107ffe, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x7fff, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="250700006bdafbb72b102d1681a9cf68d70e819d44d1c01cd0fa9cd9abd7a7eb3f23d3708bf2a1c3590f32baa8caefec6c1b8c6104a617716083f7e96f6243b53c66cabc9c1a5fa9c9f011ede7420229b9a49ef7c11aff7079f5708649aad343729baa8684914dca8651ef6f1173", @ANYBLOB="92fc151073d7e52d83121c826223163a5895ac89", @ANYBLOB="000426bd7000fedbdf250c00000005003300020000000800390006000000050038000100000008003200ff7f00000800390002000000050030000100000005002a000000000008000b0005006df31cf9545faf0dc34cb27606f8b1c0d2895dc24e18c9c9cd1c72bf5d06f524aaf235b90a07fe782c24c623574296067c5b4b78df920c33c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x101, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3ff, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x107ffe}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:18 executing program 3: r0 = socket(0x2c, 0x80000, 0xffff) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8001, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) 20:46:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:18 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 5: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7f) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x32706f42, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:19 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x101802) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, r2, 0x9, 0xfffffffffffffffe, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r2}) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x3) 20:46:19 executing program 5: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7f) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7f) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) (async) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x32706f42, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:19 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x101802) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, r2, 0x9, 0xfffffffffffffffe, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x101802) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, r2, 0x9, 0xfffffffffffffffe, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r2}) (async) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 5: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7f) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x32706f42, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x400004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x101802) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0xfffff801}) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={0x0, r2, 0x9, 0xfffffffffffffffe, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000180)={r2}) 20:46:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = mq_open(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x1, &(0x7f00000000c0)={0x100, 0x3ff, 0x10001, 0x101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mq_getsetattr(r1, &(0x7f0000000140)={0xf75, 0x7, 0x5, 0x3}, &(0x7f0000000180)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x3, 0xfe, &(0x7f00000001c0)="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"}) 20:46:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x402) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x400004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = mq_open(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x1, &(0x7f00000000c0)={0x100, 0x3ff, 0x10001, 0x101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mq_getsetattr(r1, &(0x7f0000000140)={0xf75, 0x7, 0x5, 0x3}, &(0x7f0000000180)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x3, 0xfe, &(0x7f00000001c0)="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"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) mq_open(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x1, &(0x7f00000000c0)={0x100, 0x3ff, 0x10001, 0x101}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) mq_getsetattr(r1, &(0x7f0000000140)={0xf75, 0x7, 0x5, 0x3}, &(0x7f0000000180)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x3, 0xfe, &(0x7f00000001c0)="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"}) (async) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x44891) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bind$isdn_base(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x8b, 0x20, 0x7, 0x6}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) 20:46:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) (async) ioctl$RNDADDTOENTCNT(r1, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r1 = mq_open(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x1, &(0x7f00000000c0)={0x100, 0x3ff, 0x10001, 0x101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) mq_getsetattr(r1, &(0x7f0000000140)={0xf75, 0x7, 0x5, 0x3}, &(0x7f0000000180)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x3, 0xfe, &(0x7f00000001c0)="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"}) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x402) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x400004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:19 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000200)=0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x3f1e}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x852, 0x10800) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000100)=""/175) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x44891) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bind$isdn_base(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x8b, 0x20, 0x7, 0x6}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x44891) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x8b, 0x20, 0x7, 0x6}, 0x6) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) (async) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x402) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:19 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x8000, 0x5, 0x0, 0x4}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181b40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:19 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000200)=0x9) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x3f1e}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 64) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x852, 0x10800) (rerun: 64) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000100)=""/175) 20:46:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x44891) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) bind$isdn_base(0xffffffffffffffff, &(0x7f00000001c0)={0x22, 0x8b, 0x20, 0x7, 0x6}, 0x6) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) (async, rerun: 64) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r3}) (rerun: 32) 20:46:19 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x20801) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) 20:46:19 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x8000, 0x5, 0x0, 0x4}, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:19 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x8000, 0x5, 0x0, 0x4}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x8000, 0x5, 0x0, 0x4}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181b40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 20:46:19 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000200)=0x9) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) (async, rerun: 64) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x3f1e}) (async, rerun: 64) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x852, 0x10800) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000100)=""/175) 20:46:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:19 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x20801) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x20801) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc040) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x3, 0x2, 0x2, 'syz0\x00', 0x7}, 0x2, 0x100, 0x1, r2, 0x7, 0x7fff, 'syz0\x00', &(0x7f0000000340)=['1&\x00', '/dev/input/event#\x00', '*U-#^$^{@{%:\x00', '\xa0\x00', '{#{({)\f@%-&\'*\x00', 'batadv0\x00', 'batadv0\x00'], 0x42}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)) r6 = socket(0x1, 0x80005, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r3}) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/202) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="abbb0000140000002200000000f3ffff0200000004007c7100000000"]) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd2(0x4, 0x801) r4 = eventfd(0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181b40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x181b40) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (async) 20:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:20 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x80000001) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x7}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="abbb0000140000002200000000f3ffff0200000004007c7100000000"]) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd2(0x4, 0x801) (async) r4 = eventfd(0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:20 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x20801) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x20801) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc040) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x3, 0x2, 0x2, 'syz0\x00', 0x7}, 0x2, 0x100, 0x1, r2, 0x7, 0x7fff, 'syz0\x00', &(0x7f0000000340)=['1&\x00', '/dev/input/event#\x00', '*U-#^$^{@{%:\x00', '\xa0\x00', '{#{({)\f@%-&\'*\x00', 'batadv0\x00', 'batadv0\x00'], 0x42}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)) r6 = socket(0x1, 0x80005, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r3}) (async) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/202) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x3, 0x2, 0x2, 'syz0\x00', 0x7}, 0x2, 0x100, 0x1, r2, 0x7, 0x7fff, 'syz0\x00', &(0x7f0000000340)=['1&\x00', '/dev/input/event#\x00', '*U-#^$^{@{%:\x00', '\xa0\x00', '{#{({)\f@%-&\'*\x00', 'batadv0\x00', 'batadv0\x00'], 0x42}) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)) (async) r6 = socket(0x1, 0x80005, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 64) bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r3}) (async, rerun: 64) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000240)=""/169) (async, rerun: 64) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/202) (async, rerun: 64) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (rerun: 64) 20:46:20 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x80000001) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x7}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000280)={0x3, 0x8, [0x0, 0x0]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="abbb0000140000002200000000f3ffff0200000004007c7100000000"]) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = eventfd2(0x4, 0x801) (async) r4 = eventfd(0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x301080) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r1, 0x0, 0x40, 0x9}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4284c0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r1, r1, 0x0, 0x8, 0x5}) 20:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x80000001) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x7}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x80000001) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r0, &(0x7f0000002100)={0x18, 0x0, r1, {0x7}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x80) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/22) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xd43c, 0x7, 0x1e8aceea, 0xffffc8b3, 0x5, 0x100}) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x301080) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r1, 0x0, 0x40, 0x9}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4284c0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r1, r1, 0x0, 0x8, 0x5}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x301080) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r1, 0x0, 0x40, 0x9}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4284c0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r1, r1, 0x0, 0x8, 0x5}) (async) 20:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:20 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x3, 0x1, 0x4caa, 0x4, 0x2, 0x8000}, @ipv4=@gre={{0x15, 0x4, 0x1, 0x3, 0x333, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x53e31e0eca3e644e, 0xf, "2f52268b1111fc06ca5de87fd5"}, @timestamp_addr={0x44, 0x2c, 0x3e, 0x1, 0x7, [{@broadcast, 0x800}, {@rand_addr=0x64010102, 0xc0}, {@loopback, 0x8}, {@remote, 0x3}, {@loopback, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb0, 0x1, [0x5], "ad2d087560cf6337d366c0105c52b3760dfb28b981adfeb39705b7173dc58168ef26df4b32c98e0282d34c75f905822ef515ebc441ead538ef5fee3fd437e8f2002eb8a1f0a4de4219f40664c222ba94f09aff1b71939628c6b3d90407f07bc5a101198ef5628e4d2a488b11bafacf413f9344e8f5f988b623531926f0470f438be1bd05a76a31f7f110e224805cbde2cff8765d412a49bfc8397217891b490cd111a6863418fa852106add1135863be"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x2], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x2], "00b5f257d7a411b6c8e2b38987531922223f9801c7a5a8d722a8305d8fbc2bedfb4b4a775e752b8d9f98218939d747f0e8a1b4a6e87755f06e8fc611835d734e5730333fdcc554f7ad006f6765450026f2b5ff35d642137bc9f6988ae896d5ef2695b13d843cae6c4cfcbbe12264c0d059bfe3135781619dc6f9588e255ff0417110a9e7e9c9d8621c89e0ad3bf84383e059f295621bde4e96b210"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9a}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0xff, 0x3, 0x0, 0x3, 0x3, 0xe8}, 0x2, {0x7, 0x2, 0x1, 0x9, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "c7af84f4bb89c14ec90afac7538c0b4e1545b0d1e71ef5fb5cd55b4ea248d60a9d50400fea34805bac6a6d7e9e9e223550ec38030f9b692a4c7e14a14146cab8cf81e0409faf9ecc36c41a8f"}}}}, 0x33d) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x15, 0x3e, &(0x7f0000000100)="b0f10a64e9c92e409ce2213aaf0b248537d90a2b769a195fe5a15cc23bfbf39557c2145f1d195e8f5473f2df95694a44412222eafbbbb844fd23be12ce23"}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x301080) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r1, 0x0, 0x40, 0x9}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4284c0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000100)={r1, r1, 0x0, 0x8, 0x5}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) 20:46:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x80) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/22) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xd43c, 0x7, 0x1e8aceea, 0xffffc8b3, 0x5, 0x100}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) 20:46:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:20 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x3, 0x1, 0x4caa, 0x4, 0x2, 0x8000}, @ipv4=@gre={{0x15, 0x4, 0x1, 0x3, 0x333, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x53e31e0eca3e644e, 0xf, "2f52268b1111fc06ca5de87fd5"}, @timestamp_addr={0x44, 0x2c, 0x3e, 0x1, 0x7, [{@broadcast, 0x800}, {@rand_addr=0x64010102, 0xc0}, {@loopback, 0x8}, {@remote, 0x3}, {@loopback, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb0, 0x1, [0x5], "ad2d087560cf6337d366c0105c52b3760dfb28b981adfeb39705b7173dc58168ef26df4b32c98e0282d34c75f905822ef515ebc441ead538ef5fee3fd437e8f2002eb8a1f0a4de4219f40664c222ba94f09aff1b71939628c6b3d90407f07bc5a101198ef5628e4d2a488b11bafacf413f9344e8f5f988b623531926f0470f438be1bd05a76a31f7f110e224805cbde2cff8765d412a49bfc8397217891b490cd111a6863418fa852106add1135863be"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x2], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x2], "00b5f257d7a411b6c8e2b38987531922223f9801c7a5a8d722a8305d8fbc2bedfb4b4a775e752b8d9f98218939d747f0e8a1b4a6e87755f06e8fc611835d734e5730333fdcc554f7ad006f6765450026f2b5ff35d642137bc9f6988ae896d5ef2695b13d843cae6c4cfcbbe12264c0d059bfe3135781619dc6f9588e255ff0417110a9e7e9c9d8621c89e0ad3bf84383e059f295621bde4e96b210"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9a}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0xff, 0x3, 0x0, 0x3, 0x3, 0xe8}, 0x2, {0x7, 0x2, 0x1, 0x9, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "c7af84f4bb89c14ec90afac7538c0b4e1545b0d1e71ef5fb5cd55b4ea248d60a9d50400fea34805bac6a6d7e9e9e223550ec38030f9b692a4c7e14a14146cab8cf81e0409faf9ecc36c41a8f"}}}}, 0x33d) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x15, 0x3e, &(0x7f0000000100)="b0f10a64e9c92e409ce2213aaf0b248537d90a2b769a195fe5a15cc23bfbf39557c2145f1d195e8f5473f2df95694a44412222eafbbbb844fd23be12ce23"}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x3, 0x1, 0x4caa, 0x4, 0x2, 0x8000}, @ipv4=@gre={{0x15, 0x4, 0x1, 0x3, 0x333, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x53e31e0eca3e644e, 0xf, "2f52268b1111fc06ca5de87fd5"}, @timestamp_addr={0x44, 0x2c, 0x3e, 0x1, 0x7, [{@broadcast, 0x800}, {@rand_addr=0x64010102, 0xc0}, {@loopback, 0x8}, {@remote, 0x3}, {@loopback, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb0, 0x1, [0x5], "ad2d087560cf6337d366c0105c52b3760dfb28b981adfeb39705b7173dc58168ef26df4b32c98e0282d34c75f905822ef515ebc441ead538ef5fee3fd437e8f2002eb8a1f0a4de4219f40664c222ba94f09aff1b71939628c6b3d90407f07bc5a101198ef5628e4d2a488b11bafacf413f9344e8f5f988b623531926f0470f438be1bd05a76a31f7f110e224805cbde2cff8765d412a49bfc8397217891b490cd111a6863418fa852106add1135863be"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x2], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x2], "00b5f257d7a411b6c8e2b38987531922223f9801c7a5a8d722a8305d8fbc2bedfb4b4a775e752b8d9f98218939d747f0e8a1b4a6e87755f06e8fc611835d734e5730333fdcc554f7ad006f6765450026f2b5ff35d642137bc9f6988ae896d5ef2695b13d843cae6c4cfcbbe12264c0d059bfe3135781619dc6f9588e255ff0417110a9e7e9c9d8621c89e0ad3bf84383e059f295621bde4e96b210"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9a}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0xff, 0x3, 0x0, 0x3, 0x3, 0xe8}, 0x2, {0x7, 0x2, 0x1, 0x9, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "c7af84f4bb89c14ec90afac7538c0b4e1545b0d1e71ef5fb5cd55b4ea248d60a9d50400fea34805bac6a6d7e9e9e223550ec38030f9b692a4c7e14a14146cab8cf81e0409faf9ecc36c41a8f"}}}}, 0x33d) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x15, 0x3e, &(0x7f0000000100)="b0f10a64e9c92e409ce2213aaf0b248537d90a2b769a195fe5a15cc23bfbf39557c2145f1d195e8f5473f2df95694a44412222eafbbbb844fd23be12ce23"}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x80) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/22) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xd43c, 0x7, 0x1e8aceea, 0xffffc8b3, 0x5, 0x100}) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x2ab, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000001180)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000011c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={r3}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/4096) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)={r4}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2be480) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x2ab, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000001180)) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000011c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={r3}) (async) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/4096) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)={r4}) 20:46:20 executing program 0: write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x3, 0x1, 0x4caa, 0x4, 0x2, 0x8000}, @ipv4=@gre={{0x15, 0x4, 0x1, 0x3, 0x333, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x53e31e0eca3e644e, 0xf, "2f52268b1111fc06ca5de87fd5"}, @timestamp_addr={0x44, 0x2c, 0x3e, 0x1, 0x7, [{@broadcast, 0x800}, {@rand_addr=0x64010102, 0xc0}, {@loopback, 0x8}, {@remote, 0x3}, {@loopback, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb0, 0x1, [0x5], "ad2d087560cf6337d366c0105c52b3760dfb28b981adfeb39705b7173dc58168ef26df4b32c98e0282d34c75f905822ef515ebc441ead538ef5fee3fd437e8f2002eb8a1f0a4de4219f40664c222ba94f09aff1b71939628c6b3d90407f07bc5a101198ef5628e4d2a488b11bafacf413f9344e8f5f988b623531926f0470f438be1bd05a76a31f7f110e224805cbde2cff8765d412a49bfc8397217891b490cd111a6863418fa852106add1135863be"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5, 0x2], "50a05a6d6ed74ef71e276d6ae2588b9740550f2c01c4067deeae8b4695e18d6e6476a81713e3a0ee2a69f465be9c7045fbfe28c64ae91d43cb2612e20873df8c63c7759a7edc08d80b65b8f55db252c5c76e9a7e9c6911dcd663803900cc46d8023a5b36bf11bc99a801a142cab40716e67125ea10e618be432b61240b0fe8fa847377ae4213699b4817869204fc5c78835b87813588b7a070e763674748de9ad2de77facf112feb465ab1184c8a08e28c89d830fcf7cf9b557fe3e98edf79387ddce3c4e5975a77634b782ccdacf961ba8ddffa98c7c06f18cb9ff85c5ab554214f3db93344b66290083cbfbd80d12728c1d82347fa3203a9f3"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x2], "00b5f257d7a411b6c8e2b38987531922223f9801c7a5a8d722a8305d8fbc2bedfb4b4a775e752b8d9f98218939d747f0e8a1b4a6e87755f06e8fc611835d734e5730333fdcc554f7ad006f6765450026f2b5ff35d642137bc9f6988ae896d5ef2695b13d843cae6c4cfcbbe12264c0d059bfe3135781619dc6f9588e255ff0417110a9e7e9c9d8621c89e0ad3bf84383e059f295621bde4e96b210"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2, 0x1, 0x1, 0x1, 0x4, 0x9a}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0xff, 0x3, 0x0, 0x3, 0x3, 0xe8}, 0x2, {0x7, 0x2, 0x1, 0x9, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "c7af84f4bb89c14ec90afac7538c0b4e1545b0d1e71ef5fb5cd55b4ea248d60a9d50400fea34805bac6a6d7e9e9e223550ec38030f9b692a4c7e14a14146cab8cf81e0409faf9ecc36c41a8f"}}}}, 0x33d) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x15, 0x3e, &(0x7f0000000100)="b0f10a64e9c92e409ce2213aaf0b248537d90a2b769a195fe5a15cc23bfbf39557c2145f1d195e8f5473f2df95694a44412222eafbbbb844fd23be12ce23"}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:20 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2be480) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2be480) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) (async) 20:46:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x2ab, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000001180)) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000011c0)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={r3}) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/4096) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x2ab, 0x2}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000001180)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x3, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000011c0)={r3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={r3}) (async) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/4096) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0x5421, &(0x7f0000000140)={r4}) (async) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xc45e, 0xbc, "75769a6ae7fc62cc1a73a1f95ab3c46b1bfd0187a17ec16b80938a28fd4a488903173aa56dcd8ec7032fb81b8e709877bd45a90b1d130e616ec7cd54b8594623df0061868c40208bb6f931559b097c04c47b450d79dc6034732def1e548d65db47a8c2080075fd3588a16f432dfdd360f6688709ef8001b8f1b9930a786694099ff7fd1f59e30e607c2a99ea07c37114adcfeb15721d2fb6dc394950f7d9402372c2b9cb2fd06076aeb885e545e8c9e7b6a992168dda077280048120"}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffffff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2be480) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) 20:46:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x410040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getuid() r8 = getegid() r9 = getegid() r10 = geteuid() r11 = getegid() r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r12, 0x80045200, &(0x7f00000000c0)) ioctl$RNDZAPENTCNT(r12, 0x5204, &(0x7f0000002600)=0x85) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x480, 0x0, r5, [{{0x4, 0x1, 0x3, 0xbc24, 0x7f, 0x9, {0x6, 0x901d, 0x8001, 0x1000, 0xffffffffffffffb0, 0x1, 0x5, 0x9, 0x8, 0x8000, 0x401, r6, 0xee00, 0x8, 0x3}}, {0x2, 0x100000001, 0xf, 0x5, '/dev/dri/card#\x00'}}, {{0x0, 0x2, 0x6, 0x4, 0x5, 0x10000, {0x4, 0x600000000000, 0x1b80477f, 0x0, 0x20, 0x9, 0x401, 0x4, 0xffffff7f, 0xc000, 0x3, r7, r8, 0x7fffffff, 0x81}}, {0x6, 0xffffffffffffffff, 0x1, 0x100, '('}}, {{0x2, 0x3, 0x8, 0x0, 0x5, 0xffff6a00, {0x2, 0xfffffffffffffff8, 0x7, 0x1, 0x5e, 0x3, 0xa94, 0x3, 0x6, 0x6000, 0x4, 0xee01, r9, 0x8, 0x40}}, {0x3, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x9, 0xbae, 0x2, 0x2, {0x3, 0x6, 0x7, 0x4, 0x7, 0x77d, 0x9, 0x2, 0xffffffce, 0xa000, 0x4, r10, r11, 0xffffffff, 0x1}}, {0x1, 0x126, 0x0, 0x8}}, {{0x2, 0x3, 0x5, 0x3ff, 0x1ff, 0xb126, {0x6, 0x80000000, 0x65a, 0x4, 0x8b5a, 0xf4, 0x8, 0x2a, 0x3ff, 0xc000, 0x3d6, 0xee00, 0x0, 0x40000000, 0x8}}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x73479933, 0x80000001, 0x1000, 0x2, {0x5, 0x9, 0x3, 0x1, 0xba31, 0x2, 0xfffffff7, 0x401, 0x3, 0x4000, 0x3ff, 0xee01, 0x0, 0x4, 0x9}}, {0x4, 0x101, 0xf, 0x724, '/dev/dri/card#\x00'}}, {{0x0, 0x3, 0x440d, 0x1, 0xffffa5f4, 0x4, {0x5, 0x9, 0x1, 0x100, 0x0, 0x9, 0x3f, 0x6, 0xffff, 0xc000, 0xc0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x9b33}}, {0x3, 0x6, 0xf, 0x8, '/dev/dri/card#\x00'}}]}, 0x480) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xc45e, 0xbc, "75769a6ae7fc62cc1a73a1f95ab3c46b1bfd0187a17ec16b80938a28fd4a488903173aa56dcd8ec7032fb81b8e709877bd45a90b1d130e616ec7cd54b8594623df0061868c40208bb6f931559b097c04c47b450d79dc6034732def1e548d65db47a8c2080075fd3588a16f432dfdd360f6688709ef8001b8f1b9930a786694099ff7fd1f59e30e607c2a99ea07c37114adcfeb15721d2fb6dc394950f7d9402372c2b9cb2fd06076aeb885e545e8c9e7b6a992168dda077280048120"}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xc45e, 0xbc, "75769a6ae7fc62cc1a73a1f95ab3c46b1bfd0187a17ec16b80938a28fd4a488903173aa56dcd8ec7032fb81b8e709877bd45a90b1d130e616ec7cd54b8594623df0061868c40208bb6f931559b097c04c47b450d79dc6034732def1e548d65db47a8c2080075fd3588a16f432dfdd360f6688709ef8001b8f1b9930a786694099ff7fd1f59e30e607c2a99ea07c37114adcfeb15721d2fb6dc394950f7d9402372c2b9cb2fd06076aeb885e545e8c9e7b6a992168dda077280048120"}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x44e0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x8, 0x3d14, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r1}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92dab9b6", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x894}, 0x40480c1) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x16, 0x800) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r4 = socket(0x5, 0x6, 0x5) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000140)) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2c0c01) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/74) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18, 0x0, r6, {0x2}}, 0x18) 20:46:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x410040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x80000) (async) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r7 = getuid() (async) r8 = getegid() r9 = getegid() r10 = geteuid() (async) r11 = getegid() r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r12, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDZAPENTCNT(r12, 0x5204, &(0x7f0000002600)=0x85) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x480, 0x0, r5, [{{0x4, 0x1, 0x3, 0xbc24, 0x7f, 0x9, {0x6, 0x901d, 0x8001, 0x1000, 0xffffffffffffffb0, 0x1, 0x5, 0x9, 0x8, 0x8000, 0x401, r6, 0xee00, 0x8, 0x3}}, {0x2, 0x100000001, 0xf, 0x5, '/dev/dri/card#\x00'}}, {{0x0, 0x2, 0x6, 0x4, 0x5, 0x10000, {0x4, 0x600000000000, 0x1b80477f, 0x0, 0x20, 0x9, 0x401, 0x4, 0xffffff7f, 0xc000, 0x3, r7, r8, 0x7fffffff, 0x81}}, {0x6, 0xffffffffffffffff, 0x1, 0x100, '('}}, {{0x2, 0x3, 0x8, 0x0, 0x5, 0xffff6a00, {0x2, 0xfffffffffffffff8, 0x7, 0x1, 0x5e, 0x3, 0xa94, 0x3, 0x6, 0x6000, 0x4, 0xee01, r9, 0x8, 0x40}}, {0x3, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x9, 0xbae, 0x2, 0x2, {0x3, 0x6, 0x7, 0x4, 0x7, 0x77d, 0x9, 0x2, 0xffffffce, 0xa000, 0x4, r10, r11, 0xffffffff, 0x1}}, {0x1, 0x126, 0x0, 0x8}}, {{0x2, 0x3, 0x5, 0x3ff, 0x1ff, 0xb126, {0x6, 0x80000000, 0x65a, 0x4, 0x8b5a, 0xf4, 0x8, 0x2a, 0x3ff, 0xc000, 0x3d6, 0xee00, 0x0, 0x40000000, 0x8}}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x73479933, 0x80000001, 0x1000, 0x2, {0x5, 0x9, 0x3, 0x1, 0xba31, 0x2, 0xfffffff7, 0x401, 0x3, 0x4000, 0x3ff, 0xee01, 0x0, 0x4, 0x9}}, {0x4, 0x101, 0xf, 0x724, '/dev/dri/card#\x00'}}, {{0x0, 0x3, 0x440d, 0x1, 0xffffa5f4, 0x4, {0x5, 0x9, 0x1, 0x100, 0x0, 0x9, 0x3f, 0x6, 0xffff, 0xc000, 0xc0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x9b33}}, {0x3, 0x6, 0xf, 0x8, '/dev/dri/card#\x00'}}]}, 0x480) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xc45e, 0xbc, "75769a6ae7fc62cc1a73a1f95ab3c46b1bfd0187a17ec16b80938a28fd4a488903173aa56dcd8ec7032fb81b8e709877bd45a90b1d130e616ec7cd54b8594623df0061868c40208bb6f931559b097c04c47b450d79dc6034732def1e548d65db47a8c2080075fd3588a16f432dfdd360f6688709ef8001b8f1b9930a786694099ff7fd1f59e30e607c2a99ea07c37114adcfeb15721d2fb6dc394950f7d9402372c2b9cb2fd06076aeb885e545e8c9e7b6a992168dda077280048120"}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xc45e, 0xbc, "75769a6ae7fc62cc1a73a1f95ab3c46b1bfd0187a17ec16b80938a28fd4a488903173aa56dcd8ec7032fb81b8e709877bd45a90b1d130e616ec7cd54b8594623df0061868c40208bb6f931559b097c04c47b450d79dc6034732def1e548d65db47a8c2080075fd3588a16f432dfdd360f6688709ef8001b8f1b9930a786694099ff7fd1f59e30e607c2a99ea07c37114adcfeb15721d2fb6dc394950f7d9402372c2b9cb2fd06076aeb885e545e8c9e7b6a992168dda077280048120"}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x410040) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x44e0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x8, 0x3d14, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r1}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92dab9b6", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x894}, 0x40480c1) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x16, 0x800) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r4 = socket(0x5, 0x6, 0x5) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000140)) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2c0c01) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/74) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18, 0x0, r6, {0x2}}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x44e0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x8, 0x3d14, 0x8}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r1}) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92dab9b6", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x894}, 0x40480c1) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x16, 0x800) (async) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) socket(0x5, 0x6, 0x5) (async) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000140)) (async) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2c0c01) (async) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/74) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18, 0x0, r6, {0x2}}, 0x18) (async) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = getuid() r8 = getegid() r9 = getegid() r10 = geteuid() r11 = getegid() r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r12, 0x80045200, &(0x7f00000000c0)) ioctl$RNDZAPENTCNT(r12, 0x5204, &(0x7f0000002600)=0x85) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x480, 0x0, r5, [{{0x4, 0x1, 0x3, 0xbc24, 0x7f, 0x9, {0x6, 0x901d, 0x8001, 0x1000, 0xffffffffffffffb0, 0x1, 0x5, 0x9, 0x8, 0x8000, 0x401, r6, 0xee00, 0x8, 0x3}}, {0x2, 0x100000001, 0xf, 0x5, '/dev/dri/card#\x00'}}, {{0x0, 0x2, 0x6, 0x4, 0x5, 0x10000, {0x4, 0x600000000000, 0x1b80477f, 0x0, 0x20, 0x9, 0x401, 0x4, 0xffffff7f, 0xc000, 0x3, r7, r8, 0x7fffffff, 0x81}}, {0x6, 0xffffffffffffffff, 0x1, 0x100, '('}}, {{0x2, 0x3, 0x8, 0x0, 0x5, 0xffff6a00, {0x2, 0xfffffffffffffff8, 0x7, 0x1, 0x5e, 0x3, 0xa94, 0x3, 0x6, 0x6000, 0x4, 0xee01, r9, 0x8, 0x40}}, {0x3, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x9, 0xbae, 0x2, 0x2, {0x3, 0x6, 0x7, 0x4, 0x7, 0x77d, 0x9, 0x2, 0xffffffce, 0xa000, 0x4, r10, r11, 0xffffffff, 0x1}}, {0x1, 0x126, 0x0, 0x8}}, {{0x2, 0x3, 0x5, 0x3ff, 0x1ff, 0xb126, {0x6, 0x80000000, 0x65a, 0x4, 0x8b5a, 0xf4, 0x8, 0x2a, 0x3ff, 0xc000, 0x3d6, 0xee00, 0x0, 0x40000000, 0x8}}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x73479933, 0x80000001, 0x1000, 0x2, {0x5, 0x9, 0x3, 0x1, 0xba31, 0x2, 0xfffffff7, 0x401, 0x3, 0x4000, 0x3ff, 0xee01, 0x0, 0x4, 0x9}}, {0x4, 0x101, 0xf, 0x724, '/dev/dri/card#\x00'}}, {{0x0, 0x3, 0x440d, 0x1, 0xffffa5f4, 0x4, {0x5, 0x9, 0x1, 0x100, 0x0, 0x9, 0x3f, 0x6, 0xffff, 0xc000, 0xc0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x9b33}}, {0x3, 0x6, 0xf, 0x8, '/dev/dri/card#\x00'}}]}, 0x480) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x80000) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020}, 0x2020) (async) getuid() (async) getegid() (async) getegid() (async) geteuid() (async) getegid() (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDGETENTCNT(r12, 0x80045200, &(0x7f00000000c0)) (async) ioctl$RNDZAPENTCNT(r12, 0x5204, &(0x7f0000002600)=0x85) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x480, 0x0, r5, [{{0x4, 0x1, 0x3, 0xbc24, 0x7f, 0x9, {0x6, 0x901d, 0x8001, 0x1000, 0xffffffffffffffb0, 0x1, 0x5, 0x9, 0x8, 0x8000, 0x401, r6, 0xee00, 0x8, 0x3}}, {0x2, 0x100000001, 0xf, 0x5, '/dev/dri/card#\x00'}}, {{0x0, 0x2, 0x6, 0x4, 0x5, 0x10000, {0x4, 0x600000000000, 0x1b80477f, 0x0, 0x20, 0x9, 0x401, 0x4, 0xffffff7f, 0xc000, 0x3, r7, r8, 0x7fffffff, 0x81}}, {0x6, 0xffffffffffffffff, 0x1, 0x100, '('}}, {{0x2, 0x3, 0x8, 0x0, 0x5, 0xffff6a00, {0x2, 0xfffffffffffffff8, 0x7, 0x1, 0x5e, 0x3, 0xa94, 0x3, 0x6, 0x6000, 0x4, 0xee01, r9, 0x8, 0x40}}, {0x3, 0x3, 0xf, 0x1, '/dev/dri/card#\x00'}}, {{0x4, 0x2, 0x9, 0xbae, 0x2, 0x2, {0x3, 0x6, 0x7, 0x4, 0x7, 0x77d, 0x9, 0x2, 0xffffffce, 0xa000, 0x4, r10, r11, 0xffffffff, 0x1}}, {0x1, 0x126, 0x0, 0x8}}, {{0x2, 0x3, 0x5, 0x3ff, 0x1ff, 0xb126, {0x6, 0x80000000, 0x65a, 0x4, 0x8b5a, 0xf4, 0x8, 0x2a, 0x3ff, 0xc000, 0x3d6, 0xee00, 0x0, 0x40000000, 0x8}}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x73479933, 0x80000001, 0x1000, 0x2, {0x5, 0x9, 0x3, 0x1, 0xba31, 0x2, 0xfffffff7, 0x401, 0x3, 0x4000, 0x3ff, 0xee01, 0x0, 0x4, 0x9}}, {0x4, 0x101, 0xf, 0x724, '/dev/dri/card#\x00'}}, {{0x0, 0x3, 0x440d, 0x1, 0xffffa5f4, 0x4, {0x5, 0x9, 0x1, 0x100, 0x0, 0x9, 0x3f, 0x6, 0xffff, 0xc000, 0xc0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x9b33}}, {0x3, 0x6, 0xf, 0x8, '/dev/dri/card#\x00'}}]}, 0x480) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x400001) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) (async) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x3, &(0x7f0000001080)={0x77359400}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 20:46:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x401, 0x200200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4, 0x1c, [0x1, 0x7f, 0x3ff, 0x6295, 0xc9, 0x7f, 0x4]}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x201, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x100000001, 0x400001) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x3, &(0x7f0000001080)={0x77359400}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) (async) mq_timedreceive(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x3, &(0x7f0000001080)={0x77359400}) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 20:46:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x401, 0x200200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4, 0x1c, [0x1, 0x7f, 0x3ff, 0x6295, 0xc9, 0x7f, 0x4]}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x401, 0x200200) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4, 0x1c, [0x1, 0x7f, 0x3ff, 0x6295, 0xc9, 0x7f, 0x4]}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x44e0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x8, 0x3d14, 0x8}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000851) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={r1}) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92dab9b6", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030002000000000001007063690000000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464c14449746d3000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030020000003a31302e300000000008000300000000000800010070636900c9ff0200303030303a30303a31302e30000000000800030003000000"], 0x190}, 0x1, 0x0, 0x0, 0x894}, 0x40480c1) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x16, 0x800) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r4 = socket(0x5, 0x6, 0x5) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000140)) (async) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x2c0c01) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/74) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18, 0x0, r6, {0x2}}, 0x18) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x201, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x401, 0x200200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4, 0x1c, [0x1, 0x7f, 0x3ff, 0x6295, 0xc9, 0x7f, 0x4]}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = mq_open(&(0x7f00000000c0)='@\xe9^,)\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x3, &(0x7f0000001080)={0x77359400}) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x201, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0xff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4a8401) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r3, 0x0], 0x3}) 20:46:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/242) 20:46:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 20:46:21 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/143) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000200)={0x0, 0x3, 0x96, 0x8, &(0x7f0000000140)=[{}, {}, {}]}) 20:46:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/242) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/242) (async) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0xffffffffffff7630, 0xffffffffffffffc8, 0x100000001, 0xffffffffffffff05, 0x2], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 20:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0xff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4a8401) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r3, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0xff, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4a8401) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r3, 0x0], 0x3}) (async) 20:46:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/242) 20:46:22 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/143) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000200)={0x0, 0x3, 0x96, 0x8, &(0x7f0000000140)=[{}, {}, {}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/143) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000200)={0x0, 0x3, 0x96, 0x8, &(0x7f0000000140)=[{}, {}, {}]}) (async) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0xffffffffffff7630, 0xffffffffffffffc8, 0x100000001, 0xffffffffffffff05, 0x2], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0xffffffffffff7630, 0xffffffffffffffc8, 0x100000001, 0xffffffffffffff05, 0x2], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 20:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xfff, 0xff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4a8401) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, r3, 0x0], 0x3}) 20:46:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0xfffffd15) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000000, 0x2000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/77) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000000)=""/114) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:22 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/143) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000200)={0x0, 0x3, 0x96, 0x8, &(0x7f0000000140)=[{}, {}, {}]}) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0xffffffffffff7630, 0xffffffffffffffc8, 0x100000001, 0xffffffffffffff05, 0x2], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0xffffffffffff7630, 0xffffffffffffffc8, 0x100000001, 0xffffffffffffff05, 0x2], 0x5, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0xfffffd15) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0xfffffd15) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000000, 0x2000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/77) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000000)=""/114) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000000, 0x2000) (async) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/77) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000000)=""/114) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x329b80, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200a00, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x80) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) 20:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async, rerun: 32) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x8000000000000000, 0x2000) (rerun: 32) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000140)=""/77) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000000)=""/114) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0xfffffd15) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x0, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x329b80, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200a00, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x80) (async) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) 20:46:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x0, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 5: write$vhost_msg(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000300)=""/180, 0x3, 0x4}}, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/5) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) 20:46:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x329b80, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0xfffff801}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x200a00, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x80) (async) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x25}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x14, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfffffc01, 0x40, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8bec, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800000009, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40000009, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x46813b72, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x100, 0x0, 0x0}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) r8 = getpid() write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x3, 0xfffffffffffffeff, 0x1, r8}}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r9 = geteuid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="06000000370200000100000000000000000000000000000008000000feffffff0000000000000000100000000afab16c6c6833b7000000000000000000000000b0010600000000000200000000000000070000000000000001000000006000000700000000000000000c0000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="ff00000008000000000000000500000000000000000000000000000001000000060000002b00000000000000010000000000000000000000000000000900000000000000070000000000000006000000ff000000030000000000000000800000000000001b000000000000000000010000000000030000000000000044000000000000000600000000000000c2199c6f00100000cc0a0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4d690000010000000000000005000000000000000600ec6d002f13450310003f0000000000287b2b0000000000000000"], 0x150) getuid() ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 20:46:22 executing program 5: write$vhost_msg(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000300)=""/180, 0x3, 0x4}}, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/5) write$vhost_msg(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000300)=""/180, 0x3, 0x4}}, 0x48) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)) (async) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/5) (async) 20:46:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x0, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = eventfd(0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x10001, 0x400}) 20:46:22 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x183c42) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7ffd) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x25}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x14, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfffffc01, 0x40, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r1 = eventfd(0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x10001, 0x400}) 20:46:22 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8bec, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800000009, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40000009, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x46813b72, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x100, 0x0, 0x0}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) r8 = getpid() write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x3, 0xfffffffffffffeff, 0x1, r8}}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r9 = geteuid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="31010000feffffff83cfaea947e0e05453c2f63c0e72b56169168ad65f8f6fee124ee422ce612c524ae811e88cb394248be4f878675f4c22a7c86a2df21269e5d462f0546c002351f14810701d36e44faaff1ffe4fd7af1685ebd7b858d887342b0794a8439a12e44334a844cb319cceee2037e893c23621aa985548085f98d3b9c85b9e0d0c3c81a626b6cd1996aa855a186036abff41169c4b8bebc11d2dae490cafd40c97ee95a9d229aef8062430f3b836af04f59beeb4704cf46dfec17a57e23909d04ef9f700000000000000000000000012823280777187deccafe10afd343168476dfa8b4b0904ab563804e494c8e9f76663deb75ada5da2611e009deec93fe55464d2aa8b8565ee289e91fd69be9abee0ca38b432dd6651c2c98ba036f72dfed474d7156722fd962fb70e530c3ae9e283dd03cd03e7a23e42c7173c1cb1736fd8f19cc5d2b3b413e075d472a6dffc7f02d5451c41c99591c76dbf901ffe6acd95f1fbeace", @ANYRES64=r5, @ANYBLOB="06000000370200000100000000000000000000000000000008000000feffffff0000000000000000100000000afab16c6c6833b7000000000000000000000000b0010600000000000200000000000000070000000000000001000000006000000700000000000000000c0000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="ff00000008000000000000000500000000000000000000000000000001000000060000002b00000000000000010000000000000000000000000000000900000000000000070000000000000006000000ff000000030000000000000000800000000000001b000000000000000000010000000000030000000000000044000000000000000600000000000000c2199c6f00100000cc0a0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4d690000010000000000000005000000000000000600ec6d002f13450310003f0000000000287b2b0000000000000000"], 0x150) getuid() ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8bec, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000000040), 0x800000009, 0x82000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40000009, 0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x46813b72, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x100}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) (async) getpid() (async) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x3, 0xfffffffffffffeff, 0x1, r8}}}, 0x28) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) geteuid() (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="06000000370200000100000000000000000000000000000008000000feffffff0000000000000000100000000afab16c6c6833b7000000000000000000000000b0010600000000000200000000000000070000000000000001000000006000000700000000000000000c0000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="ff00000008000000000000000500000000000000000000000000000001000000060000002b00000000000000010000000000000000000000000000000900000000000000070000000000000006000000ff000000030000000000000000800000000000001b000000000000000000010000000000030000000000000044000000000000000600000000000000c2199c6f00100000cc0a0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4d690000010000000000000005000000000000000600ec6d002f13450310003f0000000000287b2b0000000000000000"], 0x150) (async) getuid() (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) 20:46:22 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4) (async) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x183c42) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7ffd) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x25}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x14, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0xfffffc01, 0x40, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, 0x0) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000040)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (rerun: 64) 20:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:23 executing program 5: write$vhost_msg(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000300)=""/180, 0x3, 0x4}}, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/5) write$vhost_msg(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f0000000140)=""/185, 0xb9, &(0x7f0000000300)=""/180, 0x3, 0x4}}, 0x48) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)) (async) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/5) (async) 20:46:23 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8bec, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800000009, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40000009, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x46813b72, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x100, 0x0, 0x0}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) r8 = getpid() write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x3, 0xfffffffffffffeff, 0x1, r8}}}, 0x28) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) r9 = geteuid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="06000000370200000100000000000000000000000000000008000000feffffff0000000000000000100000000afab16c6c6833b7000000000000000000000000b0010600000000000200000000000000070000000000000001000000006000000700000000000000000c0000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="ff00000008000000000000000500000000000000000000000000000001000000060000002b00000000000000010000000000000000000000000000000900000000000000070000000000000006000000ff000000030000000000000000800000000000001b000000000000000000010000000000030000000000000044000000000000000600000000000000c2199c6f00100000cc0a0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4d690000010000000000000005000000000000000600ec6d002f13450310003f0000000000287b2b0000000000000000"], 0x150) getuid() ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8bec, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000000040), 0x800000009, 0x82000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40000009, 0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x46813b72, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x100}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) (async) getpid() (async) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, r5, {{0x3, 0xfffffffffffffeff, 0x1, r8}}}, 0x28) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) geteuid() (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="06000000370200000100000000000000000000000000000008000000feffffff0000000000000000100000000afab16c6c6833b7000000000000000000000000b0010600000000000200000000000000070000000000000001000000006000000700000000000000000c0000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="ff00000008000000000000000500000000000000000000000000000001000000060000002b00000000000000010000000000000000000000000000000900000000000000070000000000000006000000ff000000030000000000000000800000000000001b000000000000000000010000000000030000000000000044000000000000000600000000000000c2199c6f00100000cc0a0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="4d690000010000000000000005000000000000000600ec6d002f13450310003f0000000000287b2b0000000000000000"], 0x150) (async) getuid() (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) 20:46:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r1 = eventfd(0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r1, 0x10001, 0x400}) 20:46:23 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4) (async, rerun: 64) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x3000, 0x0) (rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x183c42) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7ffd) (async, rerun: 32) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (rerun: 32) 20:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:23 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x3b, 0x6, 0x0, {0x5, 0x2, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000040) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x4, 0x7}, {0xe, 0x4, 0x1ff}, {0x7, 0x5, 0x1f}, {0x9, 0x5, 0x6}, {0x9, 0x2, 0x81}, {0x1, 0x1, 0x80}, {0x6, 0x4, 0x10001}, {0x0, 0x1, 0x101}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x100}, {0x4, 0x1}, {0xc, 0x100}, {0x3, 0x7}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xc, 0xfffffffb}, {0x8, 0x1}, {0x5, 0x10000}, {0x3}, {0xf, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/116, 0xf3, 0x74}, 0x20) 20:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:23 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x3b, 0x6, 0x0, {0x5, 0x2, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) (async, rerun: 64) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x5a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x105040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x400) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) (async) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000040) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 64) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffff) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x4, 0x7}, {0xe, 0x4, 0x1ff}, {0x7, 0x5, 0x1f}, {0x9, 0x5, 0x6}, {0x9, 0x2, 0x81}, {0x1, 0x1, 0x80}, {0x6, 0x4, 0x10001}, {0x0, 0x1, 0x101}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x100}, {0x4, 0x1}, {0xc, 0x100}, {0x3, 0x7}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xc, 0xfffffffb}, {0x8, 0x1}, {0x5, 0x10000}, {0x3}, {0xf, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/116, 0xf3, 0x74}, 0x20) 20:46:23 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x5a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) (async) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x105040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:23 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x3b, 0x6, 0x0, {0x5, 0x2, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x3b) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:23 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x400) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 20:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x5a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x105040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000002800), 0x5a, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x40000) (async) syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x105040) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 20:46:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x20}}, 0x18) 20:46:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000040) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x4, 0x7}, {0xe, 0x4, 0x1ff}, {0x7, 0x5, 0x1f}, {0x9, 0x5, 0x6}, {0x9, 0x2, 0x81}, {0x1, 0x1, 0x80}, {0x6, 0x4, 0x10001}, {0x0, 0x1, 0x101}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x100}, {0x4, 0x1}, {0xc, 0x100}, {0x3, 0x7}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xc, 0xfffffffb}, {0x8, 0x1}, {0x5, 0x10000}, {0x3}, {0xf, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/116, 0xf3, 0x74}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000040) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x4, 0x7}, {0xe, 0x4, 0x1ff}, {0x7, 0x5, 0x1f}, {0x9, 0x5, 0x6}, {0x9, 0x2, 0x81}, {0x1, 0x1, 0x80}, {0x6, 0x4, 0x10001}, {0x0, 0x1, 0x101}]}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x100}, {0x4, 0x1}, {0xc, 0x100}, {0x3, 0x7}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xc, 0xfffffffb}, {0x8, 0x1}, {0x5, 0x10000}, {0x3}, {0xf, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/116, 0xf3, 0x74}, 0x20) (async) 20:46:23 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x3}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x300) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xffff) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/195) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/26, 0x1a}, 0x40000100) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000040)="c86b"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001400)={0x11, 0x1000, &(0x7f0000000400)="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"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x5, 0x64, &(0x7f0000000240)="5bae7d6d89b64ad30f168aae18c672e9cd196b42f376ce78e3b5b31c87676aa91364afaaf0bc18cc89abecd5d8666da81071ed28be2419c64c6bcd1a1ab58b906e65b439f5f3f64daf9ec6f8c8f7af81ce6199d37c0cb096fd710bc929daa5e466cb30e0"}) 20:46:23 executing program 4: syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:23 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x3}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x300) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xffff) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/195) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/26, 0x1a}, 0x40000100) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000040)="c86b"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001400)={0x11, 0x1000, &(0x7f0000000400)="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"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x5, 0x64, &(0x7f0000000240)="5bae7d6d89b64ad30f168aae18c672e9cd196b42f376ce78e3b5b31c87676aa91364afaaf0bc18cc89abecd5d8666da81071ed28be2419c64c6bcd1a1ab58b906e65b439f5f3f64daf9ec6f8c8f7af81ce6199d37c0cb096fd710bc929daa5e466cb30e0"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x3}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x300) (async) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xffff) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/195) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/26, 0x1a}, 0x40000100) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000040)="c86b"}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001400)={0x11, 0x1000, &(0x7f0000000400)="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"}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x5, 0x64, &(0x7f0000000240)="5bae7d6d89b64ad30f168aae18c672e9cd196b42f376ce78e3b5b31c87676aa91364afaaf0bc18cc89abecd5d8666da81071ed28be2419c64c6bcd1a1ab58b906e65b439f5f3f64daf9ec6f8c8f7af81ce6199d37c0cb096fd710bc929daa5e466cb30e0"}) (async) 20:46:23 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6, 0x1f, "f46e7025fa09300062ae78a0d15e14824c95a329bbc9e7afc607d451fb1bd7"}) 20:46:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x20}}, 0x18) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000140)={0x0, r3, 0xfffffffffffffc00, 0x400, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000001, 0xffffffffffff2520, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xe42e, 0x410400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, r5], &(0x7f0000000280)=[0xe55, 0x1000], 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r1}) 20:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 20:46:23 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6, 0x1f, "f46e7025fa09300062ae78a0d15e14824c95a329bbc9e7afc607d451fb1bd7"}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6, 0x1f, "f46e7025fa09300062ae78a0d15e14824c95a329bbc9e7afc607d451fb1bd7"}) (async) 20:46:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x20}}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) (async) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x20}}, 0x18) (async) 20:46:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000140)={0x0, r3, 0xfffffffffffffc00, 0x400, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000001, 0xffffffffffff2520, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xe42e, 0x410400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, r5], &(0x7f0000000280)=[0xe55, 0x1000], 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x100) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000140)={0x0, r3, 0xfffffffffffffc00, 0x400, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000001, 0xffffffffffff2520, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000200), 0xe42e, 0x410400) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, r5], &(0x7f0000000280)=[0xe55, 0x1000], 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r1}) (async) 20:46:23 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x9, 0x3}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x300) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xffff) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/195) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/26, 0x1a}], 0x1, &(0x7f0000000380)=""/26, 0x1a}, 0x40000100) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000040)="c86b"}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001400)={0x11, 0x1000, &(0x7f0000000400)="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"}) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x5, 0x64, &(0x7f0000000240)="5bae7d6d89b64ad30f168aae18c672e9cd196b42f376ce78e3b5b31c87676aa91364afaaf0bc18cc89abecd5d8666da81071ed28be2419c64c6bcd1a1ab58b906e65b439f5f3f64daf9ec6f8c8f7af81ce6199d37c0cb096fd710bc929daa5e466cb30e0"}) 20:46:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 20:46:23 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x6, 0x1f, "f46e7025fa09300062ae78a0d15e14824c95a329bbc9e7afc607d451fb1bd7"}) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x5, 0x4}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 20:46:24 executing program 3: eventfd(0x29) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x24000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0xf164) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000040)) 20:46:24 executing program 5: r0 = socket$kcm(0x29, 0xa, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x100) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000140)={0x0, r3, 0xfffffffffffffc00, 0x400, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x8000000000000001, 0xffffffffffff2520, 0x6}) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0xe42e, 0x410400) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, r5], &(0x7f0000000280)=[0xe55, 0x1000], 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r1}) 20:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:24 executing program 5: r0 = socket$kcm(0x29, 0xa, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x4, 0x9, 0x7}) 20:46:24 executing program 3: eventfd(0x29) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x24000) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0xf164) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000040)) 20:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 20:46:24 executing program 5: r0 = socket$kcm(0x29, 0xa, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x1, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x4, 0x9, 0x7}) 20:46:24 executing program 3: eventfd(0x29) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x24000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0xf164) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000040)) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x228400, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x7, 0x80, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x0, 0x0, 0x7f}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x25, 0x11}, 0x10) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x4) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x1f, 0xb2, &(0x7f0000000380)="6eb4e433a14f3fa4b96b87ca49326b796f399549e1fd995e292f1c6d201e513684ddc7dd1484592e26a09ea3f1d477ddc770bf2b30485477ab455df0a02bde57900aec0d7e201980960bcf41ad2a3cc3e85b06046fed88cc2f720131e6f28254ee7062b5f071dd21972eaeff55c5ef59b19d358d5da29cc6a51e99cd31f46a83443b51893749d8c9b6e693ed1567fdf464a5f01b99c85eb39b53a1ef0765869cc9f2a0a0020bddf0a79c7ab96c8d13a99c4c"}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0x1f, 0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) (async) 20:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0x9, 0x1, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x4, 0x9, 0x7}) 20:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x334b, 0xe57, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x228400, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x7, 0x80, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x0, 0x0, 0x7f}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x25, 0x11}, 0x10) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x4) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x1f, 0xb2, &(0x7f0000000380)="6eb4e433a14f3fa4b96b87ca49326b796f399549e1fd995e292f1c6d201e513684ddc7dd1484592e26a09ea3f1d477ddc770bf2b30485477ab455df0a02bde57900aec0d7e201980960bcf41ad2a3cc3e85b06046fed88cc2f720131e6f28254ee7062b5f071dd21972eaeff55c5ef59b19d358d5da29cc6a51e99cd31f46a83443b51893749d8c9b6e693ed1567fdf464a5f01b99c85eb39b53a1ef0765869cc9f2a0a0020bddf0a79c7ab96c8d13a99c4c"}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0x1f, 0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x4, 0x402002}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 20:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x334b, 0xe57, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x334b, 0xe57}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 20:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4008814}, 0x815) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x20081, 0x4, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xc5b, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 20:46:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x228400, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) (async) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x7, 0x80, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x0, 0x0, 0x7f}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x25, 0x11}, 0x10) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x4) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000440)={0x1f, 0xb2, &(0x7f0000000380)="6eb4e433a14f3fa4b96b87ca49326b796f399549e1fd995e292f1c6d201e513684ddc7dd1484592e26a09ea3f1d477ddc770bf2b30485477ab455df0a02bde57900aec0d7e201980960bcf41ad2a3cc3e85b06046fed88cc2f720131e6f28254ee7062b5f071dd21972eaeff55c5ef59b19d358d5da29cc6a51e99cd31f46a83443b51893749d8c9b6e693ed1567fdf464a5f01b99c85eb39b53a1ef0765869cc9f2a0a0020bddf0a79c7ab96c8d13a99c4c"}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000480)=0x1f, 0x4) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:24 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, r2, {0x20}}, 0x18) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, r2, r3], 0x6}) 20:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x334b, 0xe57, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4008814}, 0x815) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x20081, 0x4, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xc5b, 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 20:46:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xd1, &(0x7f0000000140)="000019876e472aab356abdefde662b6e5cfba72d1a445faac9fb5cdbe812561a5c4331495e8fd6a05fd9510543d11640d80f913d29e6cdeb47a2a02aee7bf377058dc9c17364d1cfa4430a7be115502231d0574e0208b8c7d7be343bce5672d01ae276f4b633f395ba8e675728b23f23a050e669675329a89b04c78abce1290199d6879919c1d65b78daa8d56d089f1e759f854bf7389f15235128749b5fcc2c75c71577abb4f08d709e0f840747773bb754be49699ceb51cd2d2a6c60debf99830f8193f38417cdaef753aa61289596e5"}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001140)=""/4092) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, r2, r3], 0x6}) 20:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x18d002) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:24 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, r2, r3], 0x6}) 20:46:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xd1, &(0x7f0000000140)="000019876e472aab356abdefde662b6e5cfba72d1a445faac9fb5cdbe812561a5c4331495e8fd6a05fd9510543d11640d80f913d29e6cdeb47a2a02aee7bf377058dc9c17364d1cfa4430a7be115502231d0574e0208b8c7d7be343bce5672d01ae276f4b633f395ba8e675728b23f23a050e669675329a89b04c78abce1290199d6879919c1d65b78daa8d56d089f1e759f854bf7389f15235128749b5fcc2c75c71577abb4f08d709e0f840747773bb754be49699ceb51cd2d2a6c60debf99830f8193f38417cdaef753aa61289596e5"}) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001140)=""/4092) 20:46:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4008814}, 0x815) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) (async) r5 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x20081, 0x4, 0x80000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xc5b, 0x9, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 20:46:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9a2, 0x10202) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) 20:46:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x18d002) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/221, 0xdd}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40010103) 20:46:25 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x18d002) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x480040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x100004, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xdc8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9a2, 0x10202) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9a2, 0x10202) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7, 0x7f}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) (async) 20:46:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xd1, &(0x7f0000000140)="000019876e472aab356abdefde662b6e5cfba72d1a445faac9fb5cdbe812561a5c4331495e8fd6a05fd9510543d11640d80f913d29e6cdeb47a2a02aee7bf377058dc9c17364d1cfa4430a7be115502231d0574e0208b8c7d7be343bce5672d01ae276f4b633f395ba8e675728b23f23a050e669675329a89b04c78abce1290199d6879919c1d65b78daa8d56d089f1e759f854bf7389f15235128749b5fcc2c75c71577abb4f08d709e0f840747773bb754be49699ceb51cd2d2a6c60debf99830f8193f38417cdaef753aa61289596e5"}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001140)=""/4092) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0x5421, &(0x7f0000000140)) 20:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) 20:46:25 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x480040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x100004, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xdc8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9a2, 0x10202) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0], 0x2}) 20:46:25 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000140)={0xffffff81, 0x7, 0x200, 0x9, '\x00', '\x00', '\x00', 0x2, 0x400, 0x401, 0x9, "717677961b96fd2c34474ffdcca0abd9"}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)='\x00\x00'}) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x6, 0x3, 0x8, 0x0, 0x2d, 0x6, {0x5, 0x9, 0x1, 0x8, 0x6, 0x40, 0x5, 0x18a, 0x6, 0xc000, 0x5, 0x0, r5, 0x7fff, 0x3f}}, {0x0, 0x9}}}, 0xa0) 20:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) (async) 20:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x480040) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x100004, 0x4, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xdc8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 20:46:25 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) 20:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/16) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:25 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000140)={0xffffff81, 0x7, 0x200, 0x9, '\x00', '\x00', '\x00', 0x2, 0x400, 0x401, 0x9, "717677961b96fd2c34474ffdcca0abd9"}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)='\x00\x00'}) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 20:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) (async) 20:46:25 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x8440) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/16) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/16) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:25 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000140)={0xffffff81, 0x7, 0x200, 0x9, '\x00', '\x00', '\x00', 0x2, 0x400, 0x401, 0x9, "717677961b96fd2c34474ffdcca0abd9"}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)='\x00\x00'}) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) 20:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x8440) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x2001) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x7fff, 0x10, [0x81, 0x8001, 0x4, 0xc196]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000080)) 20:46:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/16) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x4, 0x4}) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x6c7, 0x80) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/169) (async) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/16) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 20:46:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000140), 0x7ff, 0x30280) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xcfda, 0x10002) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/7) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000040)="c810"}) 20:46:25 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x2001) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x7fff, 0x10, [0x81, 0x8001, 0x4, 0xc196]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000080)) 20:46:25 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x5, 0x100, 0x1}}}, 0x28) 20:46:25 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x8440) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0xfd0b847c14468583) write$FUSE_GETXATTR(r1, &(0x7f0000000240)={0x18, 0x0, r3}, 0x18) 20:46:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000140), 0x7ff, 0x30280) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xcfda, 0x10002) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/7) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000140), 0x7ff, 0x30280) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xcfda, 0x10002) (async) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/7) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x800, 0x2001) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x7fff, 0x10, [0x81, 0x8001, 0x4, 0xc196]}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000080)) 20:46:25 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x5, 0x100, 0x1}}}, 0x28) 20:46:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18, 0xb8, 0xac9, 0xe289, 0x200, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x3, 0x9, 0x7, 0x908, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x7, 0x10001, 0x7fff, 0x90, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0xb1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b31f795}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x70, &(0x7f0000000140)=""/112, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:25 executing program 5: syz_open_dev$evdev(&(0x7f0000000140), 0x7ff, 0x30280) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xcfda, 0x10002) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/7) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000040)="c810"}) 20:46:25 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x5, 0x100, 0x1}}}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_LK(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, {{0x5, 0x100, 0x1}}}, 0x28) (async) 20:46:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18, 0xb8, 0xac9, 0xe289, 0x200, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x3, 0x9, 0x7, 0x908, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x7, 0x10001, 0x7fff, 0x90, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0xb1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b31f795}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x70, &(0x7f0000000140)=""/112, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x290000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, r5, {{0x3, 0x3, 0x2000001919c33d, 0x81, 0xa5, 0x5, {0x0, 0x9, 0x100000001, 0xffffffff, 0x2, 0xa, 0x8, 0x0, 0x81, 0xc000, 0xbc, r6, 0x0, 0x5, 0x6}}, {0x0, 0x1}}}, 0xa0) 20:46:26 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 5: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfffffffffffffff9, 0x3}}, 0x30) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18, 0xb8, 0xac9, 0xe289, 0x200, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x3, 0x9, 0x7, 0x908, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x7, 0x10001, 0x7fff, 0x90, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0xb1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b31f795}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x70, &(0x7f0000000140)=""/112, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r0, 0x1, r1, 0xffffffffffffffff, r2]}, 0x80) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:26 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x4, 0x280000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x290000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, r5, {{0x3, 0x3, 0x2000001919c33d, 0x81, 0xa5, 0x5, {0x0, 0x9, 0x100000001, 0xffffffff, 0x2, 0xa, 0x8, 0x0, 0x81, 0xc000, 0xbc, r6, 0x0, 0x5, 0x6}}, {0x0, 0x1}}}, 0xa0) 20:46:26 executing program 5: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfffffffffffffff9, 0x3}}, 0x30) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:26 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000080)=0x7fffffff) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:26 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x4, 0x280000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000780)={0x18}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x290000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, r5}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, r5, {{0x3, 0x3, 0x2000001919c33d, 0x81, 0xa5, 0x5, {0x0, 0x9, 0x100000001, 0xffffffff, 0x2, 0xa, 0x8, 0x0, 0x81, 0xc000, 0xbc, r6, 0x0, 0x5, 0x6}}, {0x0, 0x1}}}, 0xa0) 20:46:26 executing program 5: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfffffffffffffff9, 0x3}}, 0x30) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfffffffffffffff9, 0x3}}, 0x30) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x4, 0x280000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000080)=0x7fffffff) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:26 executing program 4: openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000080)=0x7fffffff) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x10000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) mq_notify(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x10, 0x4}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x40, 0x0, 0x7ff, 0x7f, 0x1, 0x8000}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000a00)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$can_bcm(r2, &(0x7f0000000980)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/43, 0x2b}, {&(0x7f0000000640)=""/199, 0xc7}, {&(0x7f0000000740)=""/131, 0x83}], 0x9, &(0x7f00000008c0)=""/157, 0x9d}, 0x100) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:26 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100), 0x80, &(0x7f0000001480)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/23, 0x17}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/52, 0x34}], 0x9}, 0x100) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001580)={0x3}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r2) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x10000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x10000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x10, 0x4}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x40, 0x0, 0x7ff, 0x7f, 0x1, 0x8000}) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000a00)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$can_bcm(r2, &(0x7f0000000980)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/43, 0x2b}, {&(0x7f0000000640)=""/199, 0xc7}, {&(0x7f0000000740)=""/131, 0x83}], 0x9, &(0x7f00000008c0)=""/157, 0x9d}, 0x100) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:26 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x10000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:26 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100), 0x80, &(0x7f0000001480)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/23, 0x17}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/52, 0x34}], 0x9}, 0x100) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001580)={0x3}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100), 0x80, &(0x7f0000001480)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/23, 0x17}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/52, 0x34}], 0x9}, 0x100) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001580)={0x3}) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r2) (async) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xc000004790bcc1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xa, 0x1c, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) mq_notify(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x10, 0x4}) (async) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x40, 0x0, 0x7ff, 0x7f, 0x1, 0x8000}) (async, rerun: 64) r1 = socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000a00)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$can_bcm(r2, &(0x7f0000000980)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/43, 0x2b}, {&(0x7f0000000640)=""/199, 0xc7}, {&(0x7f0000000740)=""/131, 0x83}], 0x9, &(0x7f00000008c0)=""/157, 0x9d}, 0x100) 20:46:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:26 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:26 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100), 0x80, &(0x7f0000001480)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/77, 0x4d}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/23, 0x17}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/52, 0x34}], 0x9}, 0x100) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000001580)={0x3}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r2) 20:46:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xc000004790bcc1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async, rerun: 64) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 64) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xa, 0x1c, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, r2, 0x0, r3, 0x0], 0x8}) 20:46:27 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20:46:27 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, r2, 0x0, r3, 0x0], 0x8}) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x80) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:27 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20:46:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0xc000004790bcc1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000780)={0x18}, 0x18) (async, rerun: 32) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xa, 0x1c, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, r2, 0x0, r3, 0x0], 0x8}) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x80) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 20:46:27 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:27 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x80) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) 20:46:27 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0xd40c) 20:46:27 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 20:46:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0xd40c) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0xd40c) (async) 20:46:27 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0xfd0b847c14468583) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) 20:46:27 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0xd40c) 20:46:27 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) (async) r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:27 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) 20:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) 20:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x121000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd4c}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x20, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x17}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) 20:46:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 20:46:27 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:27 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x2) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) (async) 20:46:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x121000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd4c}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x20, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x17}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x121000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd4c}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x20, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x17}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) 20:46:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x2, 0x9}) 20:46:27 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:46:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x96371b5d03589980) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3f29, 0x49402) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, r3], &(0x7f0000000180)=[0x7f, 0x4, 0x4, 0x2, 0x1ff, 0x100], 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) (async) 20:46:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) 20:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x2, 0x9}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x2, 0x9}) (async) 20:46:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x121000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd4c}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x20, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x17}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x121000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd4c}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000080)='GPL\x00', 0x20, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x25, 0x17}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) (async) 20:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x96371b5d03589980) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3f29, 0x49402) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, r3], &(0x7f0000000180)=[0x7f, 0x4, 0x4, 0x2, 0x1ff, 0x100], 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:28 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) 20:46:28 executing program 5: r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000140)={{0x0, 0x5, 0xefb, 0x3f, '\x00', 0x7}, 0x2, 0x20000000, 0xfffff001, r0, 0x5, 0x1, 'syz1\x00', &(0x7f0000000080)=['}--&\x00', '@\x00', '\x00', ':@/,\x00', '/dev/input/event#\x00'], 0x1f}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) 20:46:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) 20:46:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x2, 0x9}) 20:46:28 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000180)=""/75, 0x0, 0x5}}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0xc0900) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)={r3}) 20:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x96371b5d03589980) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3f29, 0x49402) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, r3], &(0x7f0000000180)=[0x7f, 0x4, 0x4, 0x2, 0x1ff, 0x100], 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) 20:46:28 executing program 5: r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000140)={{0x0, 0x5, 0xefb, 0x3f, '\x00', 0x7}, 0x2, 0x20000000, 0xfffff001, r0, 0x5, 0x1, 'syz1\x00', &(0x7f0000000080)=['}--&\x00', '@\x00', '\x00', ':@/,\x00', '/dev/input/event#\x00'], 0x1f}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) getpid() (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000140)={{0x0, 0x5, 0xefb, 0x3f, '\x00', 0x7}, 0x2, 0x20000000, 0xfffff001, r0, 0x5, 0x1, 'syz1\x00', &(0x7f0000000080)=['}--&\x00', '@\x00', '\x00', ':@/,\x00', '/dev/input/event#\x00'], 0x1f}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x8000, 0x75, "67aba363e2eef3a1f52ce12b272593198e123ce28ac85078f64ef9cdb3c6a75b193fe5b4fb80b6cb14f86f0602cab9a9005c38f630c25ccb4440bef1e6c2a04d1b3608cfb5f8a6a6ec819ec13c7db9be1c32daa231faaf76d256ec8abfbc1a3ce56f36b9d9c6879b9bb125e7b34f0406eab3813ab5"}) 20:46:28 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async, rerun: 32) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000180)=""/75, 0x0, 0x5}}, 0x48) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0xc0900) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)={r3}) 20:46:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 20:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) 20:46:28 executing program 5: r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000140)={{0x0, 0x5, 0xefb, 0x3f, '\x00', 0x7}, 0x2, 0x20000000, 0xfffff001, r0, 0x5, 0x1, 'syz1\x00', &(0x7f0000000080)=['}--&\x00', '@\x00', '\x00', ':@/,\x00', '/dev/input/event#\x00'], 0x1f}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) getpid() (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000140)={{0x0, 0x5, 0xefb, 0x3f, '\x00', 0x7}, 0x2, 0x20000000, 0xfffff001, r0, 0x5, 0x1, 'syz1\x00', &(0x7f0000000080)=['}--&\x00', '@\x00', '\x00', ':@/,\x00', '/dev/input/event#\x00'], 0x1f}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x8000, 0x75, "67aba363e2eef3a1f52ce12b272593198e123ce28ac85078f64ef9cdb3c6a75b193fe5b4fb80b6cb14f86f0602cab9a9005c38f630c25ccb4440bef1e6c2a04d1b3608cfb5f8a6a6ec819ec13c7db9be1c32daa231faaf76d256ec8abfbc1a3ce56f36b9d9c6879b9bb125e7b34f0406eab3813ab5"}) syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x8000, 0x75, "67aba363e2eef3a1f52ce12b272593198e123ce28ac85078f64ef9cdb3c6a75b193fe5b4fb80b6cb14f86f0602cab9a9005c38f630c25ccb4440bef1e6c2a04d1b3608cfb5f8a6a6ec819ec13c7db9be1c32daa231faaf76d256ec8abfbc1a3ce56f36b9d9c6879b9bb125e7b34f0406eab3813ab5"}) (async) 20:46:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 20:46:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) r3 = eventfd(0x0) write$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f0000000100), 0xb, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 20:46:28 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0x5421, &(0x7f0000000140)) (async) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000180)=""/75, 0x0, 0x5}}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0xc0900) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000100)={r3}) [ 1329.879475] ================================================================== [ 1329.887013] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x22c/0x240 [ 1329.894032] Read of size 8 at addr ffff888090cdbb40 by task syz-executor.1/4694 [ 1329.901482] [ 1329.903120] CPU: 0 PID: 4694 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1329.910915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1329.920271] Call Trace: [ 1329.922870] dump_stack+0x1fc/0x2ef [ 1329.926519] print_address_description.cold+0x54/0x219 [ 1329.931806] kasan_report_error.cold+0x8a/0x1b9 [ 1329.936481] ? vgem_gem_dumb_create+0x22c/0x240 [ 1329.941183] __asan_report_load8_noabort+0x88/0x90 [ 1329.946125] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1329.951334] ? vgem_gem_dumb_create+0x22c/0x240 [ 1329.956022] vgem_gem_dumb_create+0x22c/0x240 [ 1329.960533] drm_mode_create_dumb+0x27c/0x300 [ 1329.965046] drm_ioctl_kernel+0x208/0x2a0 [ 1329.969203] ? drm_mode_create_dumb+0x300/0x300 [ 1329.973876] ? drm_ioctl_permit+0x210/0x210 20:46:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/4096) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) [ 1329.978200] ? __might_fault+0x192/0x1d0 [ 1329.982266] drm_ioctl+0x5a0/0x9e0 [ 1329.985811] ? drm_mode_create_dumb+0x300/0x300 [ 1329.990486] ? drm_getstats+0x20/0x20 [ 1329.994296] ? __lock_acquire+0x6de/0x3ff0 [ 1329.998544] ? __lock_acquire+0x6de/0x3ff0 [ 1330.002783] ? drm_getstats+0x20/0x20 [ 1330.006589] do_vfs_ioctl+0xcdb/0x12e0 [ 1330.010479] ? lock_downgrade+0x720/0x720 [ 1330.014628] ? check_preemption_disabled+0x41/0x280 [ 1330.019637] ? ioctl_preallocate+0x200/0x200 [ 1330.024047] ? __fget+0x356/0x510 [ 1330.027492] ? do_dup2+0x450/0x450 [ 1330.031026] ? lock_acquire+0x170/0x3c0 [ 1330.034988] ? finish_task_switch+0x118/0x760 [ 1330.039476] ksys_ioctl+0x9b/0xc0 [ 1330.042922] __x64_sys_ioctl+0x6f/0xb0 [ 1330.046795] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1330.051362] do_syscall_64+0xf9/0x620 [ 1330.055165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.060342] RIP: 0033:0x7fa7c46b60a9 [ 1330.064043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1330.082931] RSP: 002b:00007fa7c2c07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.090668] RAX: ffffffffffffffda RBX: 00007fa7c47d6050 RCX: 00007fa7c46b60a9 [ 1330.097957] RDX: 0000000020000080 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1330.105221] RBP: 00007fa7c4711ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1330.112490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.119758] R13: 00007ffcb559a0af R14: 00007fa7c2c07300 R15: 0000000000022000 [ 1330.127026] [ 1330.128643] Allocated by task 4694: [ 1330.132260] kmem_cache_alloc_trace+0x12f/0x380 [ 1330.136916] __vgem_gem_create+0x44/0xf0 [ 1330.140966] vgem_gem_dumb_create+0xcf/0x240 [ 1330.145357] drm_mode_create_dumb+0x27c/0x300 [ 1330.149838] drm_ioctl_kernel+0x208/0x2a0 [ 1330.153969] drm_ioctl+0x5a0/0x9e0 [ 1330.157495] do_vfs_ioctl+0xcdb/0x12e0 [ 1330.161369] ksys_ioctl+0x9b/0xc0 [ 1330.164805] __x64_sys_ioctl+0x6f/0xb0 [ 1330.168698] do_syscall_64+0xf9/0x620 [ 1330.172515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.177687] [ 1330.179304] Freed by task 4694: [ 1330.182584] kfree+0xcc/0x210 [ 1330.185682] drm_gem_object_free+0x91/0x1c0 [ 1330.189993] drm_gem_object_put_unlocked+0xd1/0x180 [ 1330.195000] vgem_gem_dumb_create+0x10c/0x240 [ 1330.199482] drm_mode_create_dumb+0x27c/0x300 [ 1330.203981] drm_ioctl_kernel+0x208/0x2a0 [ 1330.208174] drm_ioctl+0x5a0/0x9e0 [ 1330.211709] do_vfs_ioctl+0xcdb/0x12e0 [ 1330.215599] ksys_ioctl+0x9b/0xc0 [ 1330.219042] __x64_sys_ioctl+0x6f/0xb0 [ 1330.222931] do_syscall_64+0xf9/0x620 [ 1330.226728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.231912] [ 1330.233531] The buggy address belongs to the object at ffff888090cdba40 [ 1330.233531] which belongs to the cache kmalloc-512 of size 512 [ 1330.246179] The buggy address is located 256 bytes inside of [ 1330.246179] 512-byte region [ffff888090cdba40, ffff888090cdbc40) [ 1330.258209] The buggy address belongs to the page: [ 1330.263149] page:ffffea00024336c0 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0 [ 1330.271274] flags: 0xfff00000000100(slab) [ 1330.275418] raw: 00fff00000000100 ffffea0002a64308 ffffea00025b4d08 ffff88813bff0940 [ 1330.283304] raw: 0000000000000000 ffff888090cdb040 0000000100000006 0000000000000000 [ 1330.291199] page dumped because: kasan: bad access detected [ 1330.296891] [ 1330.298501] Memory state around the buggy address: [ 1330.303426] ffff888090cdba00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1330.310788] ffff888090cdba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1330.318145] >ffff888090cdbb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1330.325490] ^ 20:46:29 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x7fffffff) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 20:46:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) (async) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/4096) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/4096) (async) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000080)) (async) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)="c810"}) (async) 20:46:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x22d1, 0x4, 0xffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) [ 1330.330931] ffff888090cdbb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1330.338278] ffff888090cdbc00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1330.345636] ================================================================== [ 1330.352973] Disabling lock debugging due to kernel taint 20:46:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xd3, 0x73ad}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) 20:46:29 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000040)=0x9) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @null, @rose, @null]}, &(0x7f00000000c0)=0x40, 0x80800) 20:46:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000002800), 0x0, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x22d1, 0x4, 0xffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0x5421, &(0x7f0000000140)) [ 1330.509049] Kernel panic - not syncing: panic_on_warn set ... [ 1330.509049] [ 1330.516454] CPU: 1 PID: 4694 Comm: syz-executor.1 Tainted: G B 4.19.211-syzkaller #0 [ 1330.525774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1330.535301] Call Trace: [ 1330.537896] dump_stack+0x1fc/0x2ef [ 1330.541539] panic+0x26a/0x50e [ 1330.544738] ? __warn_printk+0xf3/0xf3 [ 1330.548621] ? preempt_schedule_common+0x45/0xc0 [ 1330.553380] ? ___preempt_schedule+0x16/0x18 [ 1330.557954] ? trace_hardirqs_on+0x55/0x210 [ 1330.562275] kasan_end_report+0x43/0x49 [ 1330.566249] kasan_report_error.cold+0xa7/0x1b9 [ 1330.570929] ? vgem_gem_dumb_create+0x22c/0x240 [ 1330.575607] __asan_report_load8_noabort+0x88/0x90 [ 1330.580548] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1330.585761] ? vgem_gem_dumb_create+0x22c/0x240 [ 1330.590437] vgem_gem_dumb_create+0x22c/0x240 [ 1330.594928] drm_mode_create_dumb+0x27c/0x300 [ 1330.599436] drm_ioctl_kernel+0x208/0x2a0 [ 1330.603596] ? drm_mode_create_dumb+0x300/0x300 [ 1330.608258] ? drm_ioctl_permit+0x210/0x210 [ 1330.612572] ? __might_fault+0x192/0x1d0 [ 1330.616622] drm_ioctl+0x5a0/0x9e0 [ 1330.620154] ? drm_mode_create_dumb+0x300/0x300 [ 1330.624812] ? drm_getstats+0x20/0x20 [ 1330.628602] ? __lock_acquire+0x6de/0x3ff0 [ 1330.632828] ? __lock_acquire+0x6de/0x3ff0 [ 1330.637073] ? drm_getstats+0x20/0x20 [ 1330.640861] do_vfs_ioctl+0xcdb/0x12e0 [ 1330.644824] ? lock_downgrade+0x720/0x720 [ 1330.648960] ? check_preemption_disabled+0x41/0x280 [ 1330.653970] ? ioctl_preallocate+0x200/0x200 [ 1330.658369] ? __fget+0x356/0x510 [ 1330.661812] ? do_dup2+0x450/0x450 [ 1330.665337] ? lock_acquire+0x170/0x3c0 [ 1330.669297] ? finish_task_switch+0x118/0x760 [ 1330.673783] ksys_ioctl+0x9b/0xc0 [ 1330.677225] __x64_sys_ioctl+0x6f/0xb0 [ 1330.681116] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1330.685703] do_syscall_64+0xf9/0x620 [ 1330.689516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.694698] RIP: 0033:0x7fa7c46b60a9 [ 1330.698401] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1330.717291] RSP: 002b:00007fa7c2c07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.724984] RAX: ffffffffffffffda RBX: 00007fa7c47d6050 RCX: 00007fa7c46b60a9 [ 1330.732238] RDX: 0000000020000080 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1330.739492] RBP: 00007fa7c4711ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1330.746746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.754086] R13: 00007ffcb559a0af R14: 00007fa7c2c07300 R15: 0000000000022000 [ 1330.761431] Kernel Offset: disabled [ 1330.765046] Rebooting in 86400 seconds..