EATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) 00:26:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 00:26:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:41 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:26:42 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:42 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:42 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:26:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:43 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) 00:26:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:43 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:26:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:26:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000240)) 00:26:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000240)={0xb0d2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001780)={&(0x7f0000000f80), 0xc, &(0x7f0000001740)={&(0x7f0000001440)={0x54, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@remote, 0x0}, &(0x7f0000000640)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001000)={'wg1\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xcdc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff16fe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f48}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaeb3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x136}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xf0}}, 0xc004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000680)={@private2, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f00000017c0)={0x874, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x784c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x55, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0xffffffffffffff3f, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc95}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff5be}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x793}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3e99a1d9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x4, 0x7, 0x7fff}, {0x5, 0x5, 0x7, 0x51}, {0xfe7, 0x1b, 0x9, 0x8}, {0x1, 0x8, 0x64, 0x2}, {0x2, 0x0, 0x0, 0x800}, {0xae98, 0x4, 0x9e, 0xc3f}, {0x2, 0xe7, 0x1, 0xe}, {0xb706, 0x7c, 0x5, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x4040855}, 0x40000010) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x2fc, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9cc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf9}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x247}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xd1, 0x3, "cbc60f327647dc6808dc9fc14306053f8cba7af0f22e0f53d44f43f81a318d41dc84dacc6f01338195327762f17bcaa10720c2923b0d7747d1fe124df65a106fee23fc2e0ee8cdf93f1955052cd1188fffe493298a7e24c5d67b806ee8be1c32d1aa2208f51b9aa07eac1962833f2ccb218e4bd1a1edcf7528581e750c18aeea9198ddcbba1530c64f61b3630b7094e177ad9325adef28a50ccc59838570c47ecfb098920fb5a4f4bc8d066b82e61245c76bcc3c5dec32c7c03f1b52c5dafda48e5d872635c3d188f4b83b640f"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "78d6f5670cc6da101088dd6c374cfe7c237c083285b8cf8da1"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x395d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6fe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x142d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0xfffffffffffffd54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4004}, 0x20040040) 00:26:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000240)) 00:26:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:44 executing program 0: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000240)) 00:26:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:45 executing program 0: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:45 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:45 executing program 2: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/219, &(0x7f00000000c0)=0xdb) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = getpgid(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfd, {0x4, 0x0, 0x0, r2, 0x16c0, 0x0, 0x8001, 0x8, 0x0, 0x6, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040084) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c100) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8487}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8b176c951ca09fb185e8704421d5e668653053d7cb7064d39ee61844c84b71259a5a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4d50dac500cd56f56c5a7425994fe6b88fd1ec0be8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "675ac1b223a12fb2e1773fbb8a892dab6d618ed0303d4995a0f30dc8dec9dc86f22a3ff987fd99703dcd45210d09978b3bcbbc35e9772d67aa861cd035e9bc01b744d63591bc555987f2034cac14c8491dcffca601d4793d62d311bcd9896f3fb37a2ba91981119d560033fa01ffeb9b964bd473dfaaf0fd80de94e57c44a22b97e2935b039ab0cef290f8dac1480b771a2079ddd385e6c27158bdf8126eee1866bfb7fc29ed1cbfa14e6ee8c934144b52fc6185d934221d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 00:26:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:45 executing program 0: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (fail_nth: 1) 00:26:46 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000000c0)={r3}) 00:26:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:46 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000000c0)={r3}) 00:26:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x80) 00:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000000c0)={r3}) 00:26:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:47 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x80) 00:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000000c0)={r3}) 00:26:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x80) 00:26:47 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000000c0)={r3}) 00:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:47 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000000c0)={r3}) 00:26:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000000c0)={r3}) 00:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(0x0, 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000000c0)={r3}) 00:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(0x0, 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:26:48 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(0x0, 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:26:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:48 executing program 1: syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000000c0)={r3}) 00:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 1: syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000000c0)={r3}) 00:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:48 executing program 1: syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000000c0)={r3}) 00:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:49 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 00:26:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x105, 0x47, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xed, 0x7, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) 00:26:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x105, 0x47, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xed, 0x7, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x105, 0x47, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xed, 0x7, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r7}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) (async) 00:26:50 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x105, 0x47, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xed, 0x7, 0x3}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) 00:26:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0xa00) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0xa00) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0xa00) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:51 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0xa00) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2002, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2002, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2002, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0xce8, 0xc46}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ff, 0x2, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x0, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0xce8, 0xc46}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ff, 0x2, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0xce8, 0xc46}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ff, 0x2, 0x8}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0xce8, 0xc46}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ff, 0x2, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r8}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x105, 0x47, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0xed, 0x7, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(0x0, 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) (async, rerun: 64) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r8}) (rerun: 32) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(0x0, 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) 00:26:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r8}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r8}) (async) 00:26:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(0x0, 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffff, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 1: syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb, 0x2, 0x0, 0x0) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000000c0)={r3}) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@local, @remote, @empty, 0xffffffff, 0x7, 0x8, 0x100, 0x8, 0x4000100, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x5, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x25, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:26:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca58", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@local, @remote, @empty, 0xffffffff, 0x7, 0x8, 0x100, 0x8, 0x4000100, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x5, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x25, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(0x0, 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@local, @remote, @empty, 0xffffffff, 0x7, 0x8, 0x100, 0x8, 0x4000100, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1, 0x5, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x25, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(0x0, 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) 00:26:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000000c0)={r3}) 00:26:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="f1c88c090f643236f7c43f0512c74559", 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (fail_nth: 1) 00:26:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(0x0, 0xffffffffffffff05, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="f1c88c090f643236f7c43f0512c74559", 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="f1c88c090f643236f7c43f0512c74559", 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 00:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) 00:26:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:55 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="f1c88c090f643236f7c43f0512c74559", 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="f1c88c090f643236f7c43f0512c74559", 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:26:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) 00:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x2, &(0x7f0000000100)={r3}) 00:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) [ 1109.356443] FAULT_INJECTION: forcing a failure. [ 1109.356443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1109.368493] CPU: 1 PID: 22772 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 1109.376366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1109.385702] Call Trace: [ 1109.388287] dump_stack+0x1fc/0x2ef [ 1109.392005] should_fail.cold+0xa/0xf [ 1109.395806] ? setup_fault_attr+0x200/0x200 [ 1109.400123] ? __lock_acquire+0x6de/0x3ff0 [ 1109.404347] __alloc_pages_nodemask+0x239/0x2890 [ 1109.409099] ? __lock_acquire+0x6de/0x3ff0 [ 1109.413339] ? mark_held_locks+0xf0/0xf0 [ 1109.417382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1109.422205] ? mark_held_locks+0xf0/0xf0 [ 1109.426247] ? __save_stack_trace+0x72/0x190 [ 1109.430642] ? deref_stack_reg+0x134/0x1d0 [ 1109.434865] ? free_unref_page_list+0x59a/0x7b0 [ 1109.439520] ? unmap_page_range+0x1616/0x2c50 [ 1109.444000] alloc_pages_current+0x193/0x2a0 [ 1109.448403] __get_free_pages+0x8/0x40 [ 1109.452280] __tlb_remove_page_size+0x2a2/0x470 [ 1109.456948] unmap_page_range+0x14e7/0x2c50 [ 1109.461387] ? kmem_cache_free+0x7f/0x260 [ 1109.465522] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 1109.470010] ? do_group_exit+0x125/0x310 [ 1109.474077] ? exit_to_usermode_loop+0x204/0x2a0 [ 1109.478829] ? do_syscall_64+0x538/0x620 [ 1109.482880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.488236] ? uprobe_munmap+0x2d/0x4d0 [ 1109.492376] ? __lock_acquire+0x6de/0x3ff0 [ 1109.496607] unmap_single_vma+0x198/0x300 [ 1109.500742] unmap_vmas+0xa9/0x180 [ 1109.504275] exit_mmap+0x2b9/0x530 [ 1109.507807] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1109.513097] ? __khugepaged_exit+0x2a6/0x3e0 [ 1109.517494] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1109.522519] ? kmem_cache_free+0x226/0x260 [ 1109.526764] ? __khugepaged_exit+0x2c7/0x3e0 [ 1109.531268] mmput+0x14e/0x4a0 [ 1109.534455] do_exit+0xaec/0x2be0 [ 1109.537893] ? task_work_run+0x11c/0x1c0 [ 1109.541938] ? mm_update_next_owner+0x650/0x650 [ 1109.546594] ? get_signal+0x388/0x1f70 [ 1109.550477] ? lock_downgrade+0x720/0x720 [ 1109.554702] ? lock_acquire+0x170/0x3c0 [ 1109.558660] do_group_exit+0x125/0x310 [ 1109.562541] get_signal+0x3f2/0x1f70 [ 1109.566248] ? task_work_add+0x93/0x100 [ 1109.570221] do_signal+0x8f/0x1670 [ 1109.573751] ? __ia32_sys_send+0x100/0x100 [ 1109.577974] ? lock_downgrade+0x720/0x720 [ 1109.582114] ? setup_sigcontext+0x820/0x820 [ 1109.586425] ? check_preemption_disabled+0x41/0x280 [ 1109.591456] ? wait_for_completion_io+0x10/0x10 [ 1109.596122] ? vfs_write+0x393/0x540 [ 1109.599820] ? fput+0x2b/0x190 [ 1109.603006] ? ksys_write+0x1c8/0x2a0 [ 1109.606881] ? exit_to_usermode_loop+0x36/0x2a0 [ 1109.611548] exit_to_usermode_loop+0x204/0x2a0 [ 1109.616132] do_syscall_64+0x538/0x620 [ 1109.620706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.625880] RIP: 0033:0x7fccc2f7f639 [ 1109.629579] Code: Bad RIP value. [ 1109.632932] RSP: 002b:00007fccc14f2168 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1109.640627] RAX: 0000000000000000 RBX: 00007fccc309ff80 RCX: 00007fccc2f7f639 [ 1109.647888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 00:26:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:26:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5421, &(0x7f0000000100)={r3}) [ 1109.655152] RBP: 00007fccc14f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.662415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.669675] R13: 00007ffec804605f R14: 00007fccc14f2300 R15: 0000000000022000 00:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5450, &(0x7f0000000100)={r3}) 00:26:56 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:26:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 00:26:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x8, 0x0, 0x0, 0x0) 00:26:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5451, &(0x7f0000000100)={r3}) 00:26:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:26:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:26:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5452, &(0x7f0000000100)={r3}) 00:26:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "5ae90e35c72e82ff", "826e0d4d933d456ce7a316e0d689b8e1fa8bf3d4ab52349c272e704ebe91b7a1", "b7b1562f", "519db289a093f4e3"}, 0x38) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x40c200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}}, 0x80) 00:26:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5460, &(0x7f0000000100)={r3}) 00:26:58 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "5ae90e35c72e82ff", "826e0d4d933d456ce7a316e0d689b8e1fa8bf3d4ab52349c272e704ebe91b7a1", "b7b1562f", "519db289a093f4e3"}, 0x38) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (fail_nth: 1) 00:26:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}}, 0x80) 00:26:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x40049409, &(0x7f0000000100)={r3}) 00:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}}, 0x80) 00:26:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "5ae90e35c72e82ff", "826e0d4d933d456ce7a316e0d689b8e1fa8bf3d4ab52349c272e704ebe91b7a1", "b7b1562f", "519db289a093f4e3"}, 0x38) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:26:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x4020940d, &(0x7f0000000100)={r3}) 00:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:26:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x8000000, 0x0, 0x0, 0x0) 00:26:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffff298d, 0x624200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:26:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x2, &(0x7f0000000100)={r3}) 00:26:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0045878, &(0x7f0000000100)={r3}) 00:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:26:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:26:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0045878, &(0x7f0000000100)={r3}) 00:26:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffff298d, 0x624200) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (rerun: 32) 00:26:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5421, &(0x7f0000000100)={r3}) 00:26:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 00:27:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064c9, &(0x7f0000000100)={r3}) 00:27:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5450, &(0x7f0000000100)={r3}) 00:27:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffff298d, 0x624200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffff298d, 0x624200) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) 00:27:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2d8, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "593dd1dbcba87b6c2b59555c3ff6c81d34b2dad13411dc4aa862760a2b35679ff4c323d039f7a78c9fea8fc76d90501a7f5f0192fbda6cff225d13a69cd4be3da17264121c33eff676b83fdee5fb854f92d3f22cb79d002bfe68a721d804825d1baee65f30adfe394d6ddb0ddc73"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0b526db7b60979e255130c6da631d5d4141070b7770cddce66500e4e7b2be6048ec5cfd45bb6509d13c85f08cef47524d861e05174bad50a7d8a297138102601ebbcc44d76a188b2d7128428e266cd1abf967392df1ec7a1110863890a1e9160adb7db76fa42b51e295db2c4cb3f6bd260ccfd43507f6a8e66b48900f39fb1cd0ffbcd0fb9c3699c154855790c9de7793551b29d0ce57df8802cbe21f5d48642639207254b1c6732ae53a31f29dee5a8e2f1cf4b48767e7b04cbc5eb7b38f11f2cee9c009ed81017a3d68cb823b1788d5e983e255bef2b12f80600323850f3175004cdd6abb9fb8f60f407e0aad0000125"}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "1b4df92349fc9da9e8d32f412d47cdedcef691f153eaabe6082753d6f905fb1a06399a7fe6a92fca9f5aa2fd2e0c021987292c5e935c336c6f1a90d7664043cc6f3d59903eef73f3db406d152833795332171388e8fa9aeaa1a80a6a917edcd27c069d21c3d8d25a1f204c7247cb8c809418dce2a7e843da5b26d1251f37e145bbb44b0bb14d1313cda572a238253d96a56e25ca474a986440e0088c5ccd44bb8d39c657ec46029b69c4f28640cab6d1b96ce588a3ddd9fc88"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "72690b448afb4e661391d7ee4e745069194abfd85e0ff3dc40dee7415dae"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x18084}, 0x20008000) 00:27:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0189436, &(0x7f0000000100)={r3}) 00:27:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5451, &(0x7f0000000100)={r3}) 00:27:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064c9, &(0x7f0000000100)={r3}) 00:27:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:01 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) 00:27:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2d8, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "593dd1dbcba87b6c2b59555c3ff6c81d34b2dad13411dc4aa862760a2b35679ff4c323d039f7a78c9fea8fc76d90501a7f5f0192fbda6cff225d13a69cd4be3da17264121c33eff676b83fdee5fb854f92d3f22cb79d002bfe68a721d804825d1baee65f30adfe394d6ddb0ddc73"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0b526db7b60979e255130c6da631d5d4141070b7770cddce66500e4e7b2be6048ec5cfd45bb6509d13c85f08cef47524d861e05174bad50a7d8a297138102601ebbcc44d76a188b2d7128428e266cd1abf967392df1ec7a1110863890a1e9160adb7db76fa42b51e295db2c4cb3f6bd260ccfd43507f6a8e66b48900f39fb1cd0ffbcd0fb9c3699c154855790c9de7793551b29d0ce57df8802cbe21f5d48642639207254b1c6732ae53a31f29dee5a8e2f1cf4b48767e7b04cbc5eb7b38f11f2cee9c009ed81017a3d68cb823b1788d5e983e255bef2b12f80600323850f3175004cdd6abb9fb8f60f407e0aad0000125"}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "1b4df92349fc9da9e8d32f412d47cdedcef691f153eaabe6082753d6f905fb1a06399a7fe6a92fca9f5aa2fd2e0c021987292c5e935c336c6f1a90d7664043cc6f3d59903eef73f3db406d152833795332171388e8fa9aeaa1a80a6a917edcd27c069d21c3d8d25a1f204c7247cb8c809418dce2a7e843da5b26d1251f37e145bbb44b0bb14d1313cda572a238253d96a56e25ca474a986440e0088c5ccd44bb8d39c657ec46029b69c4f28640cab6d1b96ce588a3ddd9fc88"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "72690b448afb4e661391d7ee4e745069194abfd85e0ff3dc40dee7415dae"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x18084}, 0x20008000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2d8, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "593dd1dbcba87b6c2b59555c3ff6c81d34b2dad13411dc4aa862760a2b35679ff4c323d039f7a78c9fea8fc76d90501a7f5f0192fbda6cff225d13a69cd4be3da17264121c33eff676b83fdee5fb854f92d3f22cb79d002bfe68a721d804825d1baee65f30adfe394d6ddb0ddc73"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0b526db7b60979e255130c6da631d5d4141070b7770cddce66500e4e7b2be6048ec5cfd45bb6509d13c85f08cef47524d861e05174bad50a7d8a297138102601ebbcc44d76a188b2d7128428e266cd1abf967392df1ec7a1110863890a1e9160adb7db76fa42b51e295db2c4cb3f6bd260ccfd43507f6a8e66b48900f39fb1cd0ffbcd0fb9c3699c154855790c9de7793551b29d0ce57df8802cbe21f5d48642639207254b1c6732ae53a31f29dee5a8e2f1cf4b48767e7b04cbc5eb7b38f11f2cee9c009ed81017a3d68cb823b1788d5e983e255bef2b12f80600323850f3175004cdd6abb9fb8f60f407e0aad0000125"}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "1b4df92349fc9da9e8d32f412d47cdedcef691f153eaabe6082753d6f905fb1a06399a7fe6a92fca9f5aa2fd2e0c021987292c5e935c336c6f1a90d7664043cc6f3d59903eef73f3db406d152833795332171388e8fa9aeaa1a80a6a917edcd27c069d21c3d8d25a1f204c7247cb8c809418dce2a7e843da5b26d1251f37e145bbb44b0bb14d1313cda572a238253d96a56e25ca474a986440e0088c5ccd44bb8d39c657ec46029b69c4f28640cab6d1b96ce588a3ddd9fc88"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "72690b448afb4e661391d7ee4e745069194abfd85e0ff3dc40dee7415dae"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x18084}, 0x20008000) (async) 00:27:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc020660b, &(0x7f0000000100)={r3}) 00:27:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5452, &(0x7f0000000100)={r3}) 00:27:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (fail_nth: 1) 00:27:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x5460, &(0x7f0000000100)={r3}) 00:27:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2d8, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "593dd1dbcba87b6c2b59555c3ff6c81d34b2dad13411dc4aa862760a2b35679ff4c323d039f7a78c9fea8fc76d90501a7f5f0192fbda6cff225d13a69cd4be3da17264121c33eff676b83fdee5fb854f92d3f22cb79d002bfe68a721d804825d1baee65f30adfe394d6ddb0ddc73"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0b526db7b60979e255130c6da631d5d4141070b7770cddce66500e4e7b2be6048ec5cfd45bb6509d13c85f08cef47524d861e05174bad50a7d8a297138102601ebbcc44d76a188b2d7128428e266cd1abf967392df1ec7a1110863890a1e9160adb7db76fa42b51e295db2c4cb3f6bd260ccfd43507f6a8e66b48900f39fb1cd0ffbcd0fb9c3699c154855790c9de7793551b29d0ce57df8802cbe21f5d48642639207254b1c6732ae53a31f29dee5a8e2f1cf4b48767e7b04cbc5eb7b38f11f2cee9c009ed81017a3d68cb823b1788d5e983e255bef2b12f80600323850f3175004cdd6abb9fb8f60f407e0aad0000125"}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "1b4df92349fc9da9e8d32f412d47cdedcef691f153eaabe6082753d6f905fb1a06399a7fe6a92fca9f5aa2fd2e0c021987292c5e935c336c6f1a90d7664043cc6f3d59903eef73f3db406d152833795332171388e8fa9aeaa1a80a6a917edcd27c069d21c3d8d25a1f204c7247cb8c809418dce2a7e843da5b26d1251f37e145bbb44b0bb14d1313cda572a238253d96a56e25ca474a986440e0088c5ccd44bb8d39c657ec46029b69c4f28640cab6d1b96ce588a3ddd9fc88"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "72690b448afb4e661391d7ee4e745069194abfd85e0ff3dc40dee7415dae"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x18084}, 0x20008000) 00:27:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x40049409, &(0x7f0000000100)={r3}) [ 1114.956085] FAULT_INJECTION: forcing a failure. [ 1114.956085] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.004350] CPU: 1 PID: 23043 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1115.012276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1115.021636] Call Trace: [ 1115.024235] dump_stack+0x1fc/0x2ef [ 1115.027875] should_fail.cold+0xa/0xf [ 1115.031684] ? setup_fault_attr+0x200/0x200 [ 1115.036013] ? lock_acquire+0x170/0x3c0 [ 1115.039999] __should_failslab+0x115/0x180 [ 1115.044443] should_failslab+0x5/0x10 [ 1115.048250] kmem_cache_alloc_node+0x245/0x3b0 [ 1115.052857] __alloc_skb+0x71/0x560 [ 1115.056494] netlink_sendmsg+0x9f6/0xc50 [ 1115.060566] ? aa_af_perm+0x230/0x230 [ 1115.064640] ? nlmsg_notify+0x1f0/0x1f0 [ 1115.068704] ? kernel_recvmsg+0x220/0x220 [ 1115.072865] ? nlmsg_notify+0x1f0/0x1f0 [ 1115.076847] sock_sendmsg+0xc3/0x120 [ 1115.080564] ___sys_sendmsg+0x7bb/0x8e0 [ 1115.084549] ? check_preemption_disabled+0x41/0x280 [ 1115.089568] ? copy_msghdr_from_user+0x440/0x440 [ 1115.094330] ? __fget+0x32f/0x510 [ 1115.097797] ? lock_downgrade+0x720/0x720 [ 1115.101958] ? check_preemption_disabled+0x41/0x280 [ 1115.106981] ? check_preemption_disabled+0x41/0x280 [ 1115.112016] ? vfs_write+0x3d7/0x540 [ 1115.115740] ? __fdget+0x1d0/0x230 [ 1115.119292] __x64_sys_sendmsg+0x132/0x220 [ 1115.123529] ? __sys_sendmsg+0x1b0/0x1b0 [ 1115.127589] ? vfs_write+0x393/0x540 [ 1115.131318] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1115.136676] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1115.141677] ? do_syscall_64+0x21/0x620 [ 1115.145632] do_syscall_64+0xf9/0x620 [ 1115.149417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.154583] RIP: 0033:0x7f759279a639 [ 1115.158285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1115.177185] RSP: 002b:00007f7590d0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.184896] RAX: ffffffffffffffda RBX: 00007f75928baf80 RCX: 00007f759279a639 [ 1115.192158] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000003 [ 1115.199413] RBP: 00007f7590d0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.206673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.213927] R13: 00007ffd5d84726f R14: 00007f7590d0d300 R15: 0000000000022000 00:27:02 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 00:27:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x2}) 00:27:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0xa, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000001c0)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) 00:27:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0x4020940d, &(0x7f0000000100)={r3}) 00:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (fail_nth: 2) 00:27:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0045878, &(0x7f0000000100)={r3}) 00:27:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x3}) [ 1115.779758] FAULT_INJECTION: forcing a failure. [ 1115.779758] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.802867] CPU: 1 PID: 23073 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1115.810781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1115.820140] Call Trace: [ 1115.822740] dump_stack+0x1fc/0x2ef [ 1115.826386] should_fail.cold+0xa/0xf [ 1115.830209] ? setup_fault_attr+0x200/0x200 [ 1115.834541] ? lock_acquire+0x170/0x3c0 [ 1115.838527] __should_failslab+0x115/0x180 [ 1115.842776] should_failslab+0x5/0x10 [ 1115.846585] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1115.851712] __kmalloc_node_track_caller+0x38/0x70 [ 1115.856651] __alloc_skb+0xae/0x560 [ 1115.860305] netlink_sendmsg+0x9f6/0xc50 [ 1115.864380] ? aa_af_perm+0x230/0x230 [ 1115.868188] ? nlmsg_notify+0x1f0/0x1f0 [ 1115.872168] ? kernel_recvmsg+0x220/0x220 [ 1115.876325] ? nlmsg_notify+0x1f0/0x1f0 00:27:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) [ 1115.880310] sock_sendmsg+0xc3/0x120 [ 1115.884033] ___sys_sendmsg+0x7bb/0x8e0 [ 1115.888021] ? check_preemption_disabled+0x41/0x280 [ 1115.893043] ? copy_msghdr_from_user+0x440/0x440 [ 1115.897811] ? __fget+0x32f/0x510 [ 1115.901273] ? lock_downgrade+0x720/0x720 [ 1115.905430] ? check_preemption_disabled+0x41/0x280 [ 1115.910462] ? check_preemption_disabled+0x41/0x280 [ 1115.915501] ? vfs_write+0x3d7/0x540 [ 1115.919224] ? __fdget+0x1d0/0x230 [ 1115.922788] __x64_sys_sendmsg+0x132/0x220 00:27:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0xa, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000001c0)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0xa, 0x80}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0xffffffff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000001c0)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) (async) [ 1115.927028] ? __sys_sendmsg+0x1b0/0x1b0 [ 1115.931098] ? vfs_write+0x393/0x540 [ 1115.934834] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1115.940205] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1115.945223] ? do_syscall_64+0x21/0x620 [ 1115.949207] do_syscall_64+0xf9/0x620 [ 1115.953017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.958213] RIP: 0033:0x7f759279a639 [ 1115.961929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:27:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0045878, &(0x7f0000000100)={r3}) [ 1115.980913] RSP: 002b:00007f7590d0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.988628] RAX: ffffffffffffffda RBX: 00007f75928baf80 RCX: 00007f759279a639 [ 1115.995902] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000003 [ 1116.003176] RBP: 00007f7590d0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.010503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.017773] R13: 00007ffd5d84726f R14: 00007f7590d0d300 R15: 0000000000022000 00:27:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x300}) 00:27:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064c9, &(0x7f0000000100)={r3}) 00:27:03 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 00:27:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0xa, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000001c0)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0xa, 0x80}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0xffffffff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000001c0)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r5}) (async) 00:27:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x1000000}) 00:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (fail_nth: 3) 00:27:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x2000000}) 00:27:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc0189436, &(0x7f0000000100)={r3}) [ 1116.747761] FAULT_INJECTION: forcing a failure. [ 1116.747761] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.798181] CPU: 1 PID: 23126 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1116.806111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1116.815465] Call Trace: [ 1116.818067] dump_stack+0x1fc/0x2ef [ 1116.821719] should_fail.cold+0xa/0xf [ 1116.825528] ? setup_fault_attr+0x200/0x200 [ 1116.829860] ? lock_downgrade+0x720/0x720 [ 1116.834019] ? check_preemption_disabled+0x41/0x280 [ 1116.839053] __should_failslab+0x115/0x180 [ 1116.843304] should_failslab+0x5/0x10 [ 1116.847116] kmem_cache_alloc+0x3f/0x370 [ 1116.851190] skb_clone+0x151/0x3d0 [ 1116.854741] netlink_deliver_tap+0x955/0xb00 [ 1116.859166] netlink_unicast+0x545/0x690 [ 1116.863239] ? netlink_sendskb+0x110/0x110 [ 1116.867484] ? _copy_from_iter_full+0x229/0x7c0 [ 1116.872162] ? __phys_addr_symbol+0x2c/0x70 [ 1116.876494] ? __check_object_size+0x17b/0x3e0 [ 1116.881099] netlink_sendmsg+0x6c3/0xc50 [ 1116.885167] ? aa_af_perm+0x230/0x230 [ 1116.888972] ? nlmsg_notify+0x1f0/0x1f0 [ 1116.892948] ? kernel_recvmsg+0x220/0x220 [ 1116.897115] ? nlmsg_notify+0x1f0/0x1f0 [ 1116.901103] sock_sendmsg+0xc3/0x120 [ 1116.904820] ___sys_sendmsg+0x7bb/0x8e0 [ 1116.908801] ? finish_task_switch+0x146/0x760 [ 1116.913299] ? copy_msghdr_from_user+0x440/0x440 [ 1116.918068] ? io_schedule_timeout+0x140/0x140 [ 1116.922666] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1116.927434] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1116.932042] ? sockfd_lookup_light+0x73/0x180 [ 1116.936556] ? sockfd_lookup_light+0x9c/0x180 [ 1116.941059] __x64_sys_sendmsg+0x132/0x220 [ 1116.945302] ? __sys_sendmsg+0x1b0/0x1b0 [ 1116.949365] ? vfs_write+0x393/0x540 [ 1116.953095] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1116.958574] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1116.963625] ? do_syscall_64+0x21/0x620 [ 1116.967605] do_syscall_64+0xf9/0x620 [ 1116.971416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1116.976608] RIP: 0033:0x7f759279a639 [ 1116.980325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:27:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x14042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0xb22, 0x40200c44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x3000000}) [ 1116.999246] RSP: 002b:00007f7590d0d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.006965] RAX: ffffffffffffffda RBX: 00007f75928baf80 RCX: 00007f759279a639 [ 1117.014248] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000003 [ 1117.021529] RBP: 00007f7590d0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1117.028799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.036068] R13: 00007ffd5d84726f R14: 00007f7590d0d300 R15: 0000000000022000 00:27:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc020660b, &(0x7f0000000100)={r3}) [ 1117.058795] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.064548] ieee802154 phy1 wpan1: encryption failed: -22 00:27:04 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x8, 0x0, 0x0) 00:27:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0xfdfdffff}) 00:27:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x14042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0xb22, 0x40200c44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) (fail_nth: 4) 00:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x2}) 00:27:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x14042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0xb22, 0x40200c44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x14042) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x80, 0xb22, 0x40200c44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:27:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0xfffffdfd}) 00:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x2}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:05 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x1000000, 0x0, 0x0) 00:27:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x801, 0x3472c0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x9) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x28080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x4}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x3}) 00:27:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x300}) 00:27:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x801, 0x3472c0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x9) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x28080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x801, 0x3472c0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x9) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x28080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) 00:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x6}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:06 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x8000000, 0x0, 0x0) 00:27:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x1000000}) 00:27:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x801, 0x3472c0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x9) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x28080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x7}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x2000000}) 00:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0xa}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x18d081) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x2, 0x6ae6}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0xc}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:07 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 00:27:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0x3000000}) 00:27:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x18d081) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x2, 0x6ae6}}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x6558}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x8100}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0xfdfdffff}) 00:27:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x18d081) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async, rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x2, 0x6ae6}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3, 0xfffffdfd}) 00:27:08 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 00:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x270, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffffffffffff2b, 0x4, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7d8a1252ebfa3c081d7e0cbd9e19c786b0eb9152ff9cbf8a61"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cfc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000400)={0x7ff, 0x10, [0x7, 0x1, 0x6, 0x9]}) 00:27:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:08 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:27:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x2}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:08 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:27:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x270, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffffffffffff2b, 0x4, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7d8a1252ebfa3c081d7e0cbd9e19c786b0eb9152ff9cbf8a61"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cfc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000400)={0x7ff, 0x10, [0x7, 0x1, 0x6, 0x9]}) 00:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x4}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:09 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 00:27:09 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:27:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x270, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffffffffffff2b, 0x4, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7d8a1252ebfa3c081d7e0cbd9e19c786b0eb9152ff9cbf8a61"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cfc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000400)={0x7ff, 0x10, [0x7, 0x1, 0x6, 0x9]}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x270, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0xffffffffffffff2b, 0x4, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7d8a1252ebfa3c081d7e0cbd9e19c786b0eb9152ff9cbf8a61"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3cfc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000400)={0x7ff, 0x10, [0x7, 0x1, 0x6, 0x9]}) (async) 00:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x8}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe4, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "a7fc4294cdf83c1dead7dbe2c274a00aeb4d595446966a1b826d3f1bdb4f176772c997864c9a6b91b96e7b451dadb0157100a8ab8369688f84cf4d1fac1ef4a4d145cf4a0fd84b74a812dcd43983672be9df602684091b23dd356d356c253e5ed77a76e529cdbae0451866127ff007af2a5c20ec019bb9012881120dafe0905682095c94f8caf34de639dd891a3185c7b8433b9c90259ac0d4136cb8f8a09a20ceb6122cd3e42c23073734f6de3af393105f44ee5a7f1b26d2ecbf1d24517bdfcb3bb963425a84ac6b56057b9c7e1700f0470b1c", ["", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x5, 0x1, 0x752, 0x7, 'syz0\x00', 0x10000}, 0x1, 0x400, 0xd9ec, 0xffffffffffffffff, 0x3, 0x1f, 'syz0\x00', &(0x7f0000000140)=['/dev/dri/card#\x00', '\\,\x00', '$\x00'], 0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYRES64=r3]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000300)={0x34, 0xa, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @loopback, @mcast2, @loopback]}, 0x58) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) 00:27:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x400300) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000240)=""/81) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x8000000000000000, 0x218083) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000400)={0x2, 0xffffffff, 0x1c00, 0x6, '\x00', '\x00', '\x00', 0x0, 0x7, 0x5b8, 0x17e8, "a7825c41c99da617931eea660e867041"}) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, &(0x7f0000000140)=""/93, 0x5d, 0x4, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x12500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r1}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x5, 0x408040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000380)) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) recvfrom$rxrpc(r9, &(0x7f00000002c0)=""/15, 0xf, 0x40012020, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) 00:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0xe}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe4, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "a7fc4294cdf83c1dead7dbe2c274a00aeb4d595446966a1b826d3f1bdb4f176772c997864c9a6b91b96e7b451dadb0157100a8ab8369688f84cf4d1fac1ef4a4d145cf4a0fd84b74a812dcd43983672be9df602684091b23dd356d356c253e5ed77a76e529cdbae0451866127ff007af2a5c20ec019bb9012881120dafe0905682095c94f8caf34de639dd891a3185c7b8433b9c90259ac0d4136cb8f8a09a20ceb6122cd3e42c23073734f6de3af393105f44ee5a7f1b26d2ecbf1d24517bdfcb3bb963425a84ac6b56057b9c7e1700f0470b1c", ["", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:10 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0) 00:27:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x5, 0x1, 0x752, 0x7, 'syz0\x00', 0x10000}, 0x1, 0x400, 0xd9ec, 0xffffffffffffffff, 0x3, 0x1f, 'syz0\x00', &(0x7f0000000140)=['/dev/dri/card#\x00', '\\,\x00', '$\x00'], 0x14}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYRES64=r3]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000300)={0x34, 0xa, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @loopback, @mcast2, @loopback]}, 0x58) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x5, 0x1, 0x752, 0x7, 'syz0\x00', 0x10000}, 0x1, 0x400, 0xd9ec, 0xffffffffffffffff, 0x3, 0x1f, 'syz0\x00', &(0x7f0000000140)=['/dev/dri/card#\x00', '\\,\x00', '$\x00'], 0x14}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYRES64=r3]) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000300)={0x34, 0xa, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @loopback, @mcast2, @loopback]}, 0x58) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) 00:27:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x400300) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000240)=""/81) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) (async) r4 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x8000000000000000, 0x218083) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000400)={0x2, 0xffffffff, 0x1c00, 0x6, '\x00', '\x00', '\x00', 0x0, 0x7, 0x5b8, 0x17e8, "a7825c41c99da617931eea660e867041"}) (async, rerun: 64) r5 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) recvfrom$rxrpc(r5, &(0x7f0000000140)=""/93, 0x5d, 0x4, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x12500) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r1}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async, rerun: 64) r9 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r10 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x5, 0x408040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000380)) (async) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) recvfrom$rxrpc(r9, &(0x7f00000002c0)=""/15, 0xf, 0x40012020, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) 00:27:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x60}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe4, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "a7fc4294cdf83c1dead7dbe2c274a00aeb4d595446966a1b826d3f1bdb4f176772c997864c9a6b91b96e7b451dadb0157100a8ab8369688f84cf4d1fac1ef4a4d145cf4a0fd84b74a812dcd43983672be9df602684091b23dd356d356c253e5ed77a76e529cdbae0451866127ff007af2a5c20ec019bb9012881120dafe0905682095c94f8caf34de639dd891a3185c7b8433b9c90259ac0d4136cb8f8a09a20ceb6122cd3e42c23073734f6de3af393105f44ee5a7f1b26d2ecbf1d24517bdfcb3bb963425a84ac6b56057b9c7e1700f0470b1c", ["", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe4, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "a7fc4294cdf83c1dead7dbe2c274a00aeb4d595446966a1b826d3f1bdb4f176772c997864c9a6b91b96e7b451dadb0157100a8ab8369688f84cf4d1fac1ef4a4d145cf4a0fd84b74a812dcd43983672be9df602684091b23dd356d356c253e5ed77a76e529cdbae0451866127ff007af2a5c20ec019bb9012881120dafe0905682095c94f8caf34de639dd891a3185c7b8433b9c90259ac0d4136cb8f8a09a20ceb6122cd3e42c23073734f6de3af393105f44ee5a7f1b26d2ecbf1d24517bdfcb3bb963425a84ac6b56057b9c7e1700f0470b1c", ["", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0xf0}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x5, 0x1, 0x752, 0x7, 'syz0\x00', 0x10000}, 0x1, 0x400, 0xd9ec, 0xffffffffffffffff, 0x3, 0x1f, 'syz0\x00', &(0x7f0000000140)=['/dev/dri/card#\x00', '\\,\x00', '$\x00'], 0x14}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYRES64=r3]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000300)={0x34, 0xa, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @loopback, @mcast2, @loopback]}, 0x58) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) 00:27:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54040000f403200029bd7000fddbdf250100000002000000370000000400000014b000009d00000008000000120d0000030000001ab0770d0200000000080000000000000100000000040000ff0f00000000000100000054d20000069342d11f00000000100000bff2ddc809000000070000000900000008000000ffffff7f0400000040000000090000000800000003000000ffff00000600000000100000000000006363000002000000ff7f0000ae020000af070000030000000000010009000000fe54000093d70000080000000100000005000000d00000002600000009000000ff030000060000000008000002000000ffffff7f08000000c0ff3f00030000000500000005000000040000000700000002000000910000000700000005000000060d00003f00000000080000fffffffff7a000000100000002000000060000000600000006000000090000009000000007000000fbffffff00000000732c73021f00000006000000125f00000600000074f700fd0700000008000000ffffffff0400000006000000000000000080000002000000020000006f0c000002000000ffffff7f0400000002000000cb040000de653e4ef502000000080000a3000000010000000700000000000000040000009b8d000004000000280b00000100010000000000050000000700000003000000030000000100010092f01613000000001ed30000a20000000800000008000000010400000100000002000000ffffffff25000000a50900005b000000ff7f0000000000000100008006000000070000008100000007000000070000000900000003000000ff010000ff010000ff000000060000003e090000ff0100000100008000800000030000004607000000000000000000000900000040000000030000000101000005000000080000001f000000cd030083edfc6018b25469ef7e803e1b154df600020000000500000009000000faffffffdda4fa3aa175fe3d080000000080000056e8000009000000ff0300004e000000050000000200000002000000795eaf430700000001b67ca8b7dcd6a9dc7067046ad9cb082a010000018000000600000000000100ffffff7fc307000002000000ff0300000000000000ffffff0900000003000000feffffffff0f000000000000e30c0000930700008b0c00003f0000007d000000ffffffff080000000500000000000000ff00000001000000ffffffff09000000090000007f000000050000000000000079000000010000000600000003000000000000353f000000070000000200000007000000080000000100000008000000b70000000100000000000000331e0000ef60000004000000f87b000081000000ff01000008000000010000000080000001010000040000009706000000003c1f06000000ffffffffffffffffffffffff82000000310c0000000100000700000000000080ff7f0000ffffff7f04000000090000000100000000f8ffff74f1a316330000002f6465762f6472692f63617264230029002d9abe2c002a2f272e002b7d5c267d2d2b00002f6465762f6472692f6361726423000024a196bea542222ba34225dc811cddfd591fcd299edde24ae95bafff"], 0x454}, 0x1, 0x0, 0x0, 0x80000}, 0x8c1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x3f, 0x100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x145e, 0x3ff, 0x8}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x400300) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000240)=""/81) (async, rerun: 64) r3 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x8000000000000000, 0x218083) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000400)={0x2, 0xffffffff, 0x1c00, 0x6, '\x00', '\x00', '\x00', 0x0, 0x7, 0x5b8, 0x17e8, "a7825c41c99da617931eea660e867041"}) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, &(0x7f0000000140)=""/93, 0x5d, 0x4, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000, 0x12500) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x5, 0x408040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000380)) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) (async, rerun: 64) recvfrom$rxrpc(r9, &(0x7f00000002c0)=""/15, 0xf, 0x40012020, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000100)={r8}) 00:27:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:11 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x8) 00:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0xe00}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x624040) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x9, 0x2, 0x7, 0x7, '\x00', 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto$llc(r3, &(0x7f0000000280)="982f05472adab2aecdb630175143240938cee8b4effe9b3231f0fdb745536678981490d3391d2ca47dca90f6329db2675bde0c119f897012685c41cb3443967330faed8d4e6f15f9362165bbe6092687bc8bef283c25f573e0e48fcd0cbc7cab26263254f18a", 0x66, 0x20004000, &(0x7f0000000200)={0x1a, 0x30a, 0x5, 0x80, 0x20, 0x6}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x50800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x80000}, 0x8c1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x3f, 0x100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x145e, 0x3ff, 0x8}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54040000f403200029bd7000fddbdf250100000002000000370000000400000014b000009d00000008000000120d0000030000001ab0770d0200000000080000000000000100000000040000ff0f00000000000100000054d20000069342d11f00000000100000bff2ddc809000000070000000900000008000000ffffff7f0400000040000000090000000800000003000000ffff00000600000000100000000000006363000002000000ff7f0000ae020000af070000030000000000010009000000fe54000093d70000080000000100000005000000d00000002600000009000000ff030000060000000008000002000000ffffff7f08000000c0ff3f00030000000500000005000000040000000700000002000000910000000700000005000000060d00003f00000000080000fffffffff7a000000100000002000000060000000600000006000000090000009000000007000000fbffffff00000000732c73021f00000006000000125f00000600000074f700fd0700000008000000ffffffff0400000006000000000000000080000002000000020000006f0c000002000000ffffff7f0400000002000000cb040000de653e4ef502000000080000a3000000010000000700000000000000040000009b8d000004000000280b00000100010000000000050000000700000003000000030000000100010092f01613000000001ed30000a20000000800000008000000010400000100000002000000ffffffff25000000a50900005b000000ff7f0000000000000100008006000000070000008100000007000000070000000900000003000000ff010000ff010000ff000000060000003e090000ff0100000100008000800000030000004607000000000000000000000900000040000000030000000101000005000000080000001f000000cd030083edfc6018b25469ef7e803e1b154df600020000000500000009000000faffffffdda4fa3aa175fe3d080000000080000056e8000009000000ff0300004e000000050000000200000002000000795eaf430700000001b67ca8b7dcd6a9dc7067046ad9cb082a010000018000000600000000000100ffffff7fc307000002000000ff0300000000000000ffffff0900000003000000feffffffff0f000000000000e30c0000930700008b0c00003f0000007d000000ffffffff080000000500000000000000ff00000001000000ffffffff09000000090000007f000000050000000000000079000000010000000600000003000000000000353f000000070000000200000007000000080000000100000008000000b70000000100000000000000331e0000ef60000004000000f87b000081000000ff01000008000000010000000080000001010000040000009706000000003c1f06000000ffffffffffffffffffffffff82000000310c0000000100000700000000000080ff7f0000ffffff7f04000000090000000100000000f8ffff74f1a316330000002f6465762f6472692f63617264230029002d9abe2c002a2f272e002b7d5c267d2d2b00002f6465762f6472692f6361726423000024a196bea542222ba34225dc811cddfd591fcd299edde24ae95bafff"], 0x454}, 0x1, 0x0, 0x0, 0x80000}, 0x8c1) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x3f, 0x100) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x145e, 0x3ff, 0x8}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) (async) 00:27:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xdfb, 0x8c4c1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x82201) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x101) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x624040) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x9, 0x2, 0x7, 0x7, '\x00', 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto$llc(r3, &(0x7f0000000280)="982f05472adab2aecdb630175143240938cee8b4effe9b3231f0fdb745536678981490d3391d2ca47dca90f6329db2675bde0c119f897012685c41cb3443967330faed8d4e6f15f9362165bbe6092687bc8bef283c25f573e0e48fcd0cbc7cab26263254f18a", 0x66, 0x20004000, &(0x7f0000000200)={0x1a, 0x30a, 0x5, 0x80, 0x20, 0x6}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x6) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x50800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x437f}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xdfb, 0x8c4c1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x82201) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x101) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x6000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x624040) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x9, 0x2, 0x7, 0x7, '\x00', 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto$llc(r3, &(0x7f0000000280)="982f05472adab2aecdb630175143240938cee8b4effe9b3231f0fdb745536678981490d3391d2ca47dca90f6329db2675bde0c119f897012685c41cb3443967330faed8d4e6f15f9362165bbe6092687bc8bef283c25f573e0e48fcd0cbc7cab26263254f18a", 0x66, 0x20004000, &(0x7f0000000200)={0x1a, 0x30a, 0x5, 0x80, 0x20, 0x6}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x6) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x50800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:12 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x1000000) 00:27:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x80000}, 0x8c1) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x3f, 0x100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x145e, 0x3ff, 0x8}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x7f43}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xdfb, 0x8c4c1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x82201) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x101) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) 00:27:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0xf000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) 00:27:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x2, 0xfff, 0x4}) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x2, 0x5, 0x13, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb0, 0x560, {0x6, 0xd4, 0xf7, 0xe7, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x2a, 0xc, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0xcc, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x98}}, 0x11) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) (async) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) (async) 00:27:13 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x8000000) 00:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0xffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x2, 0xfff, 0x4}) (async) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x2, 0x5, 0x13, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb0, 0x560, {0x6, 0xd4, 0xf7, 0xe7, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x2a, 0xc, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0xcc, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x98}}, 0x11) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x2, 0x5, 0x13, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb0, 0x560, {0x6, 0xd4, 0xf7, 0xe7, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x2a, 0xc, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0xcc, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x98}}, 0x11) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1c23ce63, 0xa2b2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1c23ce63, 0xa2b2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x2, 0x5, 0x13, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bb0, 0x560, {0x6, 0xd4, 0xf7, 0xe7, 0x0, 0x2, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x2a, 0xc, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0xcc, 0x0, 0x0, 0x70bd2d, 0x3502}]}, 0x98}}, 0x11) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x2, 0xfff, 0x4}) (async) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) 00:27:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1c23ce63, 0xa2b2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x2}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xbaf, 0x78000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) 00:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x4}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) 00:27:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xbaf, 0x78000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0xbaf, 0x78000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) (async) 00:27:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x36, &(0x7f0000000640)=""/54, 0x40f00, 0x11, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x200, 0xc1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x3, 0x906, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0xfff, 0x7ff, 0x1, 0x48, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x5, 0x56, &(0x7f00000001c0)=""/86, 0x40f00, 0x19, '\x00', r3, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000008c0)=[r2, 0x1, r5, r6, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) 00:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x8}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 00:27:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) (async) 00:27:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xe}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xbaf, 0x78000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0xbaf, 0x78000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) (async) 00:27:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x36, &(0x7f0000000640)=""/54, 0x40f00, 0x11, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x200, 0xc1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x3, 0x906, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x9}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0xfff, 0x7ff, 0x1, 0x48, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x5, 0x56, &(0x7f00000001c0)=""/86, 0x40f00, 0x19, '\x00', r3, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000008c0)=[r2, 0x1, r5, r6, 0x1, 0xffffffffffffffff]}, 0x80) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) 00:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x60}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x36, &(0x7f0000000640)=""/54, 0x40f00, 0x11, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x200, 0xc1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x7ff, 0x4, 0x3, 0x906, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x9}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0xfff, 0x7ff, 0x1, 0x48, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x5, 0x56, &(0x7f00000001c0)=""/86, 0x40f00, 0x19, '\x00', r3, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x5, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000008c0)=[r2, 0x1, r5, r6, 0x1, 0xffffffffffffffff]}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) 00:27:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0xa0202) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x5, 0x5, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)={0x6, 0xc, [0xff, 0x8, 0xbc2]}) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'a', ' *:* ', 'rm\x00'}, 0x9) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xf0}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:15 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000) 00:27:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1101, 0x6, 0x2, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) 00:27:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0xa0202) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x5, 0x5, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)={0x6, 0xc, [0xff, 0x8, 0xbc2]}) (async) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'a', ' *:* ', 'rm\x00'}, 0x9) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xe00}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x437f}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0xa0202) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x80) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x5, 0x5, 0x0, 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)={0x6, 0xc, [0xff, 0x8, 0xbc2]}) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'a', ' *:* ', 'rm\x00'}, 0x9) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1101, 0x6, 0x2, 0x0, 0x0}) (async, rerun: 32) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) 00:27:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:16 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000) 00:27:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x101, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x103, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0x7, 0xfffffffe, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x6000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x1, 0x10000, 0x2, 0x3ff}, 0x60, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0xffff, 0x6, 0x1266e9d6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x406240) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1101, 0x6, 0x2, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) 00:27:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x1, 0x10000, 0x2, 0x3ff}, 0x60, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0xffff, 0x6, 0x1266e9d6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x406240) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x1, 0x10000, 0x2, 0x3ff}, 0x60, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0xffff, 0x6, 0x1266e9d6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x406240) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x7f43}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x101, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x103, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0x7, 0xfffffffe, 0x0, 0x0}) (async) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3fe, 0x7, 0x2, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xf000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:17 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) recvfrom$llc(r0, 0x0, 0xffffffad, 0x40000000, 0x0, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x309, 0x81, 0x4, 0x2, 0x4, @random="e9c60d501072"}, 0x10) 00:27:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x1, 0x10000, 0x2, 0x3ff}, 0x60, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0xffff, 0x6, 0x1266e9d6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x406240) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3fe, 0x7, 0x2, 0x0, 0x0}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x101, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x103, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0x7, 0xfffffffe, 0x0, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0x101}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x103, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0x7, 0xfffffffe}) (async) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x1000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040084}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x6, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x9, 0x80, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000001c0)=0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 00:27:17 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) recvfrom$llc(r0, 0x0, 0xffffffad, 0x40000000, 0x0, 0x0) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x309, 0x81, 0x4, 0x2, 0x4, @random="e9c60d501072"}, 0x10) 00:27:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3fe, 0x7, 0x2, 0x0, 0x0}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x2000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x9, 0x80, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r8}) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000001c0)=0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 00:27:18 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) recvfrom$llc(r0, 0x0, 0xffffffad, 0x40000000, 0x0, 0x0) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x309, 0x81, 0x4, 0x2, 0x4, @random="e9c60d501072"}, 0x10) 00:27:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040084}, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x6, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x4000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x200001) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)={0x3, 0x14, [0x6, 0x3, 0x8, 0x80, 0x3f]}) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x0, 0x11}) r2 = socket(0x23, 0x4, 0x4) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x80800) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1f, 0x105843) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000001c0)=""/187) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 00:27:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ffbfe, 0x2c0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x9, 0x80, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r8}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000001c0)=0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r5}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x9, 0x80, 0x81}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r8}) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000001c0)=0x3) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) 00:27:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x8000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040084}, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x6, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xe000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ffbfe, 0x2c0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3ffbfe, 0x2c0000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xff, 0x7fffffff, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x8001, 0x402) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x3, 0x8, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x60000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x200001) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)={0x3, 0x14, [0x6, 0x3, 0x8, 0x80, 0x3f]}) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x6, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x0, 0x11}) r2 = socket(0x23, 0x4, 0x4) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x80800) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1f, 0x105843) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000001c0)=""/187) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 00:27:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x3ffbfe, 0x2c0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3ffbfe, 0x2c0000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xff, 0x7fffffff, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x8001, 0x402) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x3, 0x8, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xff, 0x7fffffff}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x8001, 0x402) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x3, 0x8, 0x800}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) (async) 00:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r7 = socket(0x10, 0x6, 0xffffff80) getsockname$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) 00:27:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x7f430000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async) r7 = socket(0x10, 0x6, 0xffffff80) getsockname$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) 00:27:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x101, 0x7309c760, 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket(0x18, 0x2, 0x3a6) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x1, 0x4) 00:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x9effffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xff, 0x7fffffff, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140), 0x8001, 0x402) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x3, 0x8, 0x800}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) (rerun: 64) 00:27:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x200001) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)={0x3, 0x14, [0x6, 0x3, 0x8, 0x80, 0x3f]}) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x6, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x0, 0x11}) (async) r2 = socket(0x23, 0x4, 0x4) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x80800) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1f, 0x105843) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000001c0)=""/187) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 00:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r7 = socket(0x10, 0x6, 0xffffff80) getsockname$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) 00:27:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x101, 0x7309c760, 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = socket(0x18, 0x2, 0x3a6) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x1, 0x4) 00:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x101, 0x7309c760, 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = socket(0x18, 0x2, 0x3a6) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x1, 0x4) 00:27:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x48000000, 0x4, 'syz0\x00', 0xfffffffb}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 00:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xfffff000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x9, 0x5, 0x17a5, 0x80000001, '\x00', 0xffffffff}, 0x6, 0x40, 0x6, 0xffffffffffffffff, 0x4, 0x1f, 'syz0\x00', &(0x7f0000000200)=['/dev/dri/card#\x00', '^-\x00', '\'-#%\x00', '/dev/dri/card#\x00'], 0x26}) recvfrom$rxrpc(r4, &(0x7f0000000140)=""/81, 0x51, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) 00:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xffffff7f}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) 00:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x9, 0x5, 0x17a5, 0x80000001, '\x00', 0xffffffff}, 0x6, 0x40, 0x6, 0xffffffffffffffff, 0x4, 0x1f, 'syz0\x00', &(0x7f0000000200)=['/dev/dri/card#\x00', '^-\x00', '\'-#%\x00', '/dev/dri/card#\x00'], 0x26}) recvfrom$rxrpc(r4, &(0x7f0000000140)=""/81, 0x51, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) 00:27:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x9}) 00:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xffffff9e}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xfe, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) sendto$llc(r5, &(0x7f00000003c0)="89f3c1f8d49b43190a2bdfbc8de534c46251184097d1de011aa8e43787c3743e14c49796b4288442db989b37d924039ccfad707cf23acbccfdd10ee6ff4f19", 0x3f, 0x40080, &(0x7f0000000400)={0x1a, 0x301, 0xdd, 0x6, 0x9, 0x6, @random="4d6de194a76f"}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x1, "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", 0x2, 0x1, 0x7, 0x2, 0x2, 0x46, 0x27}, r6}}, 0x128) 00:27:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x9, 0x5, 0x17a5, 0x80000001, '\x00', 0xffffffff}, 0x6, 0x40, 0x6, 0xffffffffffffffff, 0x4, 0x1f, 'syz0\x00', &(0x7f0000000200)=['/dev/dri/card#\x00', '^-\x00', '\'-#%\x00', '/dev/dri/card#\x00'], 0x26}) recvfrom$rxrpc(r4, &(0x7f0000000140)=""/81, 0x51, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x9, 0x5, 0x17a5, 0x80000001, '\x00', 0xffffffff}, 0x6, 0x40, 0x6, 0xffffffffffffffff, 0x4, 0x1f, 'syz0\x00', &(0x7f0000000200)=['/dev/dri/card#\x00', '^-\x00', '\'-#%\x00', '/dev/dri/card#\x00'], 0x26}) (async) recvfrom$rxrpc(r4, &(0x7f0000000140)=""/81, 0x51, 0x2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x24) (async) 00:27:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x48000000, 0x4, 'syz0\x00', 0xfffffffb}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x48000000, 0x4, 'syz0\x00', 0xfffffffb}) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) 00:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xfffffff0}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x9}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x9}) (async) 00:27:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xfe, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) sendto$llc(r5, &(0x7f00000003c0)="89f3c1f8d49b43190a2bdfbc8de534c46251184097d1de011aa8e43787c3743e14c49796b4288442db989b37d924039ccfad707cf23acbccfdd10ee6ff4f19", 0x3f, 0x40080, &(0x7f0000000400)={0x1a, 0x301, 0xdd, 0x6, 0x9, 0x6, @random="4d6de194a76f"}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x1, "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", 0x2, 0x1, 0x7, 0x2, 0x2, 0x46, 0x27}, r6}}, 0x128) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xfe, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) (async) sendto$llc(r5, &(0x7f00000003c0)="89f3c1f8d49b43190a2bdfbc8de534c46251184097d1de011aa8e43787c3743e14c49796b4288442db989b37d924039ccfad707cf23acbccfdd10ee6ff4f19", 0x3f, 0x40080, &(0x7f0000000400)={0x1a, 0x301, 0xdd, 0x6, 0x9, 0x6, @random="4d6de194a76f"}, 0x10) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x111, 0x8}}, 0x20) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)=0x2) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x1, "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", 0x2, 0x1, 0x7, 0x2, 0x2, 0x46, 0x27}, r6}}, 0x128) (async) 00:27:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0xffffffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r4 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xfe, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) sendto$llc(r5, &(0x7f00000003c0)="89f3c1f8d49b43190a2bdfbc8de534c46251184097d1de011aa8e43787c3743e14c49796b4288442db989b37d924039ccfad707cf23acbccfdd10ee6ff4f19", 0x3f, 0x40080, &(0x7f0000000400)={0x1a, 0x301, 0xdd, 0x6, 0x9, 0x6, @random="4d6de194a76f"}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)=0x2) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x1, "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", 0x2, 0x1, 0x7, 0x2, 0x2, 0x46, 0x27}, r6}}, 0x128) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xfe, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) (async) sendto$llc(r5, &(0x7f00000003c0)="89f3c1f8d49b43190a2bdfbc8de534c46251184097d1de011aa8e43787c3743e14c49796b4288442db989b37d924039ccfad707cf23acbccfdd10ee6ff4f19", 0x3f, 0x40080, &(0x7f0000000400)={0x1a, 0x301, 0xdd, 0x6, 0x9, 0x6, @random="4d6de194a76f"}, 0x10) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x111, 0x8}}, 0x20) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000300)=0x2) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0x1, "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", 0x2, 0x1, 0x7, 0x2, 0x2, 0x46, 0x27}, r6}}, 0x128) (async) 00:27:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0x9, 0x9}) 00:27:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:22 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x48000000, 0x4, 'syz0\x00', 0xfffffffb}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x48000000, 0x4, 'syz0\x00', 0xfffffffb}) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) 00:27:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r4 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x223, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x100, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="37c6eb7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) 00:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x223, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x100, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="37c6eb7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) 00:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:22 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:23 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r3}) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x338, 0x2, 0x78, 0x1f, 0xff, @local}, 0x10) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:23 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x100, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="37c6eb7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x100, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="37c6eb7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) 00:27:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x223, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x223}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) 00:27:23 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000001180), 0x2, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001200)={0xffffffe0, 0x20, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x404401) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000140)=""/4096) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000001140)=0xb036) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "24fff2", "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"}}, 0x110) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000001180), 0x2, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001200)={0xffffffe0, 0x20, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x404401) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000140)=""/4096) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000001140)=0xb036) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "24fff2", "86edb63b1ae56d8e21e8399fe5ee26ebdb052b3ac0c1cf46db376f8bfcc417372804e4fec64c2f82204a56fba934fc71580f0fd25ce92f3b9d4a7183922872d458ee8543d3c52ac2e0c217354d2070d6e926c79fb8d3f65ca19ca3965f07834cc9563bfe44127d5a7c72f30c0e05dadf50a63f2ab6c43e1d2e0b53149908cb521bbc34fcdbf2b97d74b3452b7100f108285fa1693ed20ee07153d3f6852abb3b40ef0373a6b581041e754b1a70d4af745d3a5a56c89168bfaaed6dd42e1fb92a99cc01fcfe715806f4d2f49c17b9a9122a596a7998813ef99ffbcad81282a19310939ec2797ada40cd43976fe881d47918d302cf10694dcf8ea7ec58a1f332ad"}}, 0x110) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r3}) (async) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x338, 0x2, 0x78, 0x1f, 0xff, @local}, 0x10) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000001180), 0x2, 0x3) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000001200)={0xffffffe0, 0x20, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x404401) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000140)=""/4096) (async, rerun: 64) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) (async, rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000001140)=0xb036) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "24fff2", "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"}}, 0x110) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe00}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x437f}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) 00:27:24 executing program 1: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x104, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x4, 0x7}) 00:27:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r3}) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x338, 0x2, 0x78, 0x1f, 0xff, @local}, 0x10) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r3}) (async) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x338, 0x2, 0x78, 0x1f, 0xff, @local}, 0x10) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 1: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x104, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x4, 0x7}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7f43}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) 00:27:24 executing program 1: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x104, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x4, 0x7}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xaac, 0x401, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x7f, 0x844}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:24 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000001580)={0x1020, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0xfd0, 0x8, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1758dc6e7be7fab7dba31accbffbd4b18ea35a752f0909b773f5dba82170b9ee"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14460346306b8bb80c9e91e78c92d6dbd9d0bd16870059c4523b6a2b7aa8c57b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d8d0328349f674ec39ee6d9a985b45d30f3928af3a3b6ed755c2e9dba83ce21"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bff83bc9b6a872304df4acc35a087914541d34b3234e86250b1e2d9215f7c39"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @loopback}}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "332ddd5bdfbc8e5391b1ac15f21c39f45fa70cd112d55619e0e82100254cc1c9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @mcast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de4d9bed9533b7570117af75995be180b2a1e71deddae20b2b4295b56a0fd07c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x7dc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5778}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x8000}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4}, 0x10000094) connect$bt_sco(r1, &(0x7f00000005c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x27, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfffff8eb) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x3, 0xf8}) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/71) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 00:27:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001000)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64d}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5e, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000090}, 0x24004040) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xaac, 0x401, 0x3}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x7f, 0x844}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:24 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000001580)={0x1020, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0xfd0, 0x8, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1758dc6e7be7fab7dba31accbffbd4b18ea35a752f0909b773f5dba82170b9ee"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14460346306b8bb80c9e91e78c92d6dbd9d0bd16870059c4523b6a2b7aa8c57b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d8d0328349f674ec39ee6d9a985b45d30f3928af3a3b6ed755c2e9dba83ce21"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bff83bc9b6a872304df4acc35a087914541d34b3234e86250b1e2d9215f7c39"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @loopback}}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "332ddd5bdfbc8e5391b1ac15f21c39f45fa70cd112d55619e0e82100254cc1c9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @mcast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de4d9bed9533b7570117af75995be180b2a1e71deddae20b2b4295b56a0fd07c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x7dc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5778}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x8000}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4}, 0x10000094) connect$bt_sco(r1, &(0x7f00000005c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000001580)={0x1020, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0xfd0, 0x8, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1758dc6e7be7fab7dba31accbffbd4b18ea35a752f0909b773f5dba82170b9ee"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14460346306b8bb80c9e91e78c92d6dbd9d0bd16870059c4523b6a2b7aa8c57b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d8d0328349f674ec39ee6d9a985b45d30f3928af3a3b6ed755c2e9dba83ce21"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bff83bc9b6a872304df4acc35a087914541d34b3234e86250b1e2d9215f7c39"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @loopback}}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "332ddd5bdfbc8e5391b1ac15f21c39f45fa70cd112d55619e0e82100254cc1c9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @mcast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de4d9bed9533b7570117af75995be180b2a1e71deddae20b2b4295b56a0fd07c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x7dc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5778}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x8000}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4}, 0x10000094) (async) connect$bt_sco(r1, &(0x7f00000005c0), 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x27, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfffff8eb) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x3, 0xf8}) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/71) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x27, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) socket$inet6(0xa, 0x2, 0xfffff8eb) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x3, 0xf8}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/71) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (async) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xaac, 0x401, 0x3}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x7f, 0x844}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) (async, rerun: 64) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000001580)={0x1020, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0xfd0, 0x8, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1758dc6e7be7fab7dba31accbffbd4b18ea35a752f0909b773f5dba82170b9ee"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "14460346306b8bb80c9e91e78c92d6dbd9d0bd16870059c4523b6a2b7aa8c57b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d8d0328349f674ec39ee6d9a985b45d30f3928af3a3b6ed755c2e9dba83ce21"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7bff83bc9b6a872304df4acc35a087914541d34b3234e86250b1e2d9215f7c39"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x401, @loopback}}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "332ddd5bdfbc8e5391b1ac15f21c39f45fa70cd112d55619e0e82100254cc1c9"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @mcast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de4d9bed9533b7570117af75995be180b2a1e71deddae20b2b4295b56a0fd07c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x7dc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5778}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x8000}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4}, 0x10000094) (async) connect$bt_sco(r1, &(0x7f00000005c0), 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 00:27:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001000)={'wg1\x00'}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64d}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5e, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000090}, 0x24004040) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x27, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfffff8eb) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x6, 0x3, 0xf8}) (async) socket$l2tp(0x2, 0x2, 0x73) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/71) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 00:27:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/4096) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1000, 0xffffffc1, 0x421, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x800000000000353, 0x90000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x4f56, 0x8000, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x50881) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001000)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x64d}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5e, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000090}, 0x24004040) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x50881) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x800000000000353, 0x90000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x4f56, 0x8000, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/4096) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1000, 0xffffffc1, 0x421, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x48) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:27:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x50881) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) 00:27:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x800000000000353, 0x90000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x4f56, 0x8000, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60000000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001040)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x154, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x66, 0x3, "0074d92bef9dd5ca18e1fd105fdeedb32f106264b687cfbbdbf57fc062c115d80412798601c72a1a3b967e96b916cfde1167b381daa230374829eeb0d26271993f98d77e17e156005bbbeb6af079b8abcd20c1810bb90aafc788ae3a513a2f2b293f"}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x15df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28fb6a2c}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000084) 00:27:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7f430000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001040)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x154, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x66, 0x3, "0074d92bef9dd5ca18e1fd105fdeedb32f106264b687cfbbdbf57fc062c115d80412798601c72a1a3b967e96b916cfde1167b381daa230374829eeb0d26271993f98d77e17e156005bbbeb6af079b8abcd20c1810bb90aafc788ae3a513a2f2b293f"}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x15df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28fb6a2c}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000084) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001040)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x154, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x66, 0x3, "0074d92bef9dd5ca18e1fd105fdeedb32f106264b687cfbbdbf57fc062c115d80412798601c72a1a3b967e96b916cfde1167b381daa230374829eeb0d26271993f98d77e17e156005bbbeb6af079b8abcd20c1810bb90aafc788ae3a513a2f2b293f"}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x15df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28fb6a2c}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000084) (async) 00:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9effffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001040)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x154, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x66, 0x3, "0074d92bef9dd5ca18e1fd105fdeedb32f106264b687cfbbdbf57fc062c115d80412798601c72a1a3b967e96b916cfde1167b381daa230374829eeb0d26271993f98d77e17e156005bbbeb6af079b8abcd20c1810bb90aafc788ae3a513a2f2b293f"}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @remote, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x15df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28fb6a2c}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000084) 00:27:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/4096) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1000, 0xffffffc1, 0x421, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/4096) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1000, 0xffffffc1, 0x421, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x48) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 00:27:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)) 00:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2b2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x76850fa46723e329}, 0x4) r2 = socket(0x25, 0x5, 0xffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x4f036ac3eee88ae7, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x24}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24004000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xc0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x8, 0x800, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xdc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xccb4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe20e}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)="5a9a2cc72886e651c6c41490b703dd0a158e3d9465f83a522d05defd06249f32f67daa9ae4f9fd71d3de5da6e9193537f6de6d83b82ca70bf80b455f4527d0afbf819c3e2927894d845b208359f2e13ffa1c47785ae793b62e16d18f72ad65e1c4874b4da04ac52e916ccfd9407308df07e819e74f2fa40ccb68be445edd61979eaba7661dd4aca514012bb1386a00f62b4aeeb91f74cb090f9021db6f161d0413d8fce22072fa746b51a6beb59281eb88e84a5345c1e8", 0xb7) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)) 00:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffff000}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2b2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x76850fa46723e329}, 0x4) r2 = socket(0x25, 0x5, 0xffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x4f036ac3eee88ae7, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x24}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24004000) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)) 00:27:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xc0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x8, 0x800, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xdc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xccb4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe20e}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)="5a9a2cc72886e651c6c41490b703dd0a158e3d9465f83a522d05defd06249f32f67daa9ae4f9fd71d3de5da6e9193537f6de6d83b82ca70bf80b455f4527d0afbf819c3e2927894d845b208359f2e13ffa1c47785ae793b62e16d18f72ad65e1c4874b4da04ac52e916ccfd9407308df07e819e74f2fa40ccb68be445edd61979eaba7661dd4aca514012bb1386a00f62b4aeeb91f74cb090f9021db6f161d0413d8fce22072fa746b51a6beb59281eb88e84a5345c1e8", 0xb7) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)) 00:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff7f}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x1], 0x2) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0xa, 0x1, 0x81, 0x0, [@local, @private1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00']}, 0x58) 00:27:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)="5a9a2cc72886e651c6c41490b703dd0a158e3d9465f83a522d05defd06249f32f67daa9ae4f9fd71d3de5da6e9193537f6de6d83b82ca70bf80b455f4527d0afbf819c3e2927894d845b208359f2e13ffa1c47785ae793b62e16d18f72ad65e1c4874b4da04ac52e916ccfd9407308df07e819e74f2fa40ccb68be445edd61979eaba7661dd4aca514012bb1386a00f62b4aeeb91f74cb090f9021db6f161d0413d8fce22072fa746b51a6beb59281eb88e84a5345c1e8", 0xb7) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000140)="5a9a2cc72886e651c6c41490b703dd0a158e3d9465f83a522d05defd06249f32f67daa9ae4f9fd71d3de5da6e9193537f6de6d83b82ca70bf80b455f4527d0afbf819c3e2927894d845b208359f2e13ffa1c47785ae793b62e16d18f72ad65e1c4874b4da04ac52e916ccfd9407308df07e819e74f2fa40ccb68be445edd61979eaba7661dd4aca514012bb1386a00f62b4aeeb91f74cb090f9021db6f161d0413d8fce22072fa746b51a6beb59281eb88e84a5345c1e8", 0xb7) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x94}}, 0x10) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)) (async) 00:27:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2b2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x76850fa46723e329}, 0x4) (async) r2 = socket(0x25, 0x5, 0xffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x4f036ac3eee88ae7, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x24}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24004000) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff9e}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xc0400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r4 = socket(0x8, 0x800, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xdc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xccb4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe20e}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xc0400) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) socket(0x8, 0x800, 0x2) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xdc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xccb4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe20e}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)) 00:27:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x101, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffff0}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket(0x0, 0x2, 0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x364, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x3, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0d6499}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8c2}}, {0x8}}}]}}]}, 0x364}}, 0x0) 00:27:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x101, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x101, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x1], 0x2) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0xa, 0x1, 0x81, 0x0, [@local, @private1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00']}, 0x58) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x1], 0x2) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0xa, 0x1, 0x81, 0x0, [@local, @private1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00']}, 0x58) (async) 00:27:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) r4 = socket(0x0, 0x2, 0x7fffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x364, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x3, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0d6499}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8c2}}, {0x8}}}]}}]}, 0x364}}, 0x0) 00:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffffff}, 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x101, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x101, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x8, 0x6, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000180)={r6}) 00:27:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) 00:27:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket(0x0, 0x2, 0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x364, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x3, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0d6499}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8c2}}, {0x8}}}]}}]}, 0x364}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) socket(0x0, 0x2, 0x7fffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x364, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x3, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0d6499}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8c2}}, {0x8}}}]}}]}, 0x364}}, 0x0) (async) 00:27:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000019c0)='3\x00', 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x1], 0x2) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x3a, 0xa, 0x1, 0x81, 0x0, [@local, @private1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00']}, 0x58) 00:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x8, 0x6, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000180)={r6}) 00:27:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x600000, 0x7, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140)=0x401, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) 00:27:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) 00:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0240a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x8, 0x6, 0x0, 0x0}) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x7, 0x40000) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000180)={r6}) 00:27:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x600000, 0x7, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140)=0x401, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x600000, 0x7}) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140)=0x401, 0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) (async) 00:27:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) 00:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0440a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:29 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket(0x21, 0x0, 0x2) recvfrom$llc(r0, 0x0, 0x24, 0x40012122, 0x0, 0xffffffffffffff85) 00:27:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x0, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "95cf072e2a185ea67ec275e56dcf91cb3d2a141024ee35b1e003d2c885d59fff0058af49a8988fa486593f6cd30f38bc4b7757c17a45a28624f3c47e"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r5}) 00:27:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x600000, 0x7, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140)=0x401, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x600000, 0x7}) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140)=0x401, 0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) (async) 00:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) 00:27:29 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0xb, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:29 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket(0x21, 0x0, 0x2) recvfrom$llc(r0, 0x0, 0x24, 0x40012122, 0x0, 0xffffffffffffff85) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) socket(0x21, 0x0, 0x2) (async) recvfrom$llc(r0, 0x0, 0x24, 0x40012122, 0x0, 0xffffffffffffff85) (async) 00:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "95cf072e2a185ea67ec275e56dcf91cb3d2a141024ee35b1e003d2c885d59fff0058af49a8988fa486593f6cd30f38bc4b7757c17a45a28624f3c47e"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "95cf072e2a185ea67ec275e56dcf91cb3d2a141024ee35b1e003d2c885d59fff0058af49a8988fa486593f6cd30f38bc4b7757c17a45a28624f3c47e"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r5}) (async) 00:27:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:29 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0xb, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) 00:27:29 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket(0x21, 0x0, 0x2) recvfrom$llc(r0, 0x0, 0x24, 0x40012122, 0x0, 0xffffffffffffff85) 00:27:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async, rerun: 64) r3 = socket(0x11, 0x3, 0x0) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), 0x4) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d6040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "95cf072e2a185ea67ec275e56dcf91cb3d2a141024ee35b1e003d2c885d59fff0058af49a8988fa486593f6cd30f38bc4b7757c17a45a28624f3c47e"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r5}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x453, 0x100, 0x70bd28, 0x25dfdbfb, "95cf072e2a185ea67ec275e56dcf91cb3d2a141024ee35b1e003d2c885d59fff0058af49a8988fa486593f6cd30f38bc4b7757c17a45a28624f3c47e"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000180)={r5}) (async) 00:27:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:29 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0xb, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x102, 0xb, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) (async) 00:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0xf}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181b00) r2 = accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x180000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14bb1783}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783306c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4de931cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ddbbd49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178b0914}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6174c6a7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f3383ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47dacf37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7061b4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ca72d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1327062b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2874c016}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2fab46}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x740f3939}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x169b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c98c06d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bbe2cfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc6ae8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x708d63ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b2adb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa297bc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb97a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf1f2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x715f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8299}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d57}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f7cefa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2443e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b9fe38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe63d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f1103d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b8b2a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x966}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc517}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be25c49}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d96}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x111115de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x435a9d57}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8600, 0x0) setsockopt$llc_int(r2, 0x10c, 0xb, &(0x7f0000000180)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/132) 00:27:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r2 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) r3 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={0x0}}, 0x0) (async, rerun: 64) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 64) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r6}) 00:27:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0x40, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/68, &(0x7f00000001c0)=0x44) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x400100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x2c0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0x40, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/68, &(0x7f00000001c0)=0x44) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x400100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0x40, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/68, &(0x7f00000001c0)=0x44) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x400100) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:27:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101101) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 00:27:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xfff, 0x39c}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) prctl$PR_GET_FP_MODE(0x2e) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) 00:27:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r7}) 00:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0xec0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x6, 0x40, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/68, &(0x7f00000001c0)=0x44) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x400100) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:27:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181b00) (async) r2 = accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x180000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14bb1783}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783306c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4de931cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ddbbd49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178b0914}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6174c6a7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f3383ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47dacf37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7061b4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ca72d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1327062b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2874c016}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2fab46}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x740f3939}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x169b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c98c06d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bbe2cfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc6ae8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x708d63ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b2adb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa297bc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb97a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf1f2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x715f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8299}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d57}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f7cefa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2443e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b9fe38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe63d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f1103d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b8b2a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x966}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc517}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be25c49}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d96}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x111115de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x435a9d57}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8600, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0xb, &(0x7f0000000180)=0x6, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/132) 00:27:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101101) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101101) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) (async) 00:27:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, 0x0) 00:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x33fe0}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xfff, 0x39c}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) prctl$PR_GET_FP_MODE(0x2e) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xfff, 0x39c}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) (async) prctl$PR_GET_FP_MODE(0x2e) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) (async) 00:27:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000140)={0x5, 0x1f80000, 0x5, 0xc6b, '\x00', '\x00', '\x00', 0x1, 0x1, 0xd3, 0x9, "7efd80864824fed4fd805073ebdfdb20"}) 00:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x200006ec}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000140)={0x5, 0x1f80000, 0x5, 0xc6b, '\x00', '\x00', '\x00', 0x1, 0x1, 0xd3, 0x9, "7efd80864824fed4fd805073ebdfdb20"}) 00:27:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xfff, 0x39c}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) prctl$PR_GET_FP_MODE(0x2e) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xfff, 0x39c}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) (async) prctl$PR_GET_FP_MODE(0x2e) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) (async) 00:27:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, 0x0) 00:27:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101101) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101101) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) (async) 00:27:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x4, 0xc44}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000140)={0x5, 0x1f80000, 0x5, 0xc6b, '\x00', '\x00', '\x00', 0x1, 0x1, 0xd3, 0x9, "7efd80864824fed4fd805073ebdfdb20"}) 00:27:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181b00) r2 = accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x180000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14bb1783}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783306c7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4de931cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ddbbd49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x178b0914}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6174c6a7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f3383ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47dacf37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7061b4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ca72d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1327062b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2874c016}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2fab46}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x740f3939}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x169b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c98c06d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bbe2cfe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc6ae8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x708d63ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b2adb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fa297bc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb97a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf1f2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x715f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8299}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d57}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f7cefa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2443e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b9fe38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe63d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f1103d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b8b2a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x966}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc517}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be25c49}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d96}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x111115de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x435a9d57}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8600, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0xb, &(0x7f0000000180)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/132) 00:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac4d0040a78a1d91ee919a1895c635fffa4b11baa59c3c83d0e53a04e6c068ec9e1c94fd35205a9e83dc69ede3a8262034b7493815d8d90dfb40a07c78b588737fc4a9aa9b8222cea4298add0bfd125233e6588da9e239acc7095150023ae10da46f73779c305feb838d9f24bf6346da79f3c992bc9915e440ca8e82ec25d78d46e4a43cdbde757cc466f2acfdafd3d2242763d521a10bedb3ede39562ac6f9d96795fce85d62d1751a4fcd279340128cc3fdf15634104ca57dffe8bfd8893945d9ed2af1aa544019d6c4c216c823ba4b9bc9a58fb80c2c85d7aa3fb59062438cef0af9e24cd27be4de56977ce889c3389b77041385a89944368f444ab1888ff59a14a17313406e3c73101ac8c154da3467231afb75b89cdcd637ef75b5cb3881379fb97f18afaf117e6ddc1a51ed8175195705fda1c7e69939e49dd991174128102793a161ea8692a79461b83abc424b0aaf56a8a80d55ca29f7789e0baebd31be4125068ab66262ff65713bf0ba1e40d66580c268bc19b8a0bf4dad7a33e84c75f0447dfa75afd6439938d7d007af6df8c2c74d2dbd09f9a0e351fbee2d9f6566cfa874972a56a2de1dd2de0668aa05df690651ed01e4482b28c52b6bb7a113163bc5c3a8b6a83cbd663584982ca589c2d512abf17c3d7883a639596cc", @ANYRES16=0x0, @ANYRES64], 0x40004dac}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000101, 0xffffffff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x20007, 0x8002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0xc40}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:27:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 00:27:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, 0x0) 00:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:27:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0xc40}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80, 0x4, 0xc40}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:27:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 00:27:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000040)={0xa, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6, 0xf97}) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x400000) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffff05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x101, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)) 00:27:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1000101, 0xffffffff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x101, 0x20007, 0x8002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) 00:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x20000105, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES64], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 1144.996448] ================================================================== [ 1145.004030] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x22c/0x240 [ 1145.011046] Read of size 8 at addr ffff8880a9e9f180 by task syz-executor.2/25209 [ 1145.018575] [ 1145.020212] CPU: 1 PID: 25209 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1145.028095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1145.037454] Call Trace: [ 1145.040067] dump_stack+0x1fc/0x2ef [ 1145.043706] print_address_description.cold+0x54/0x219 [ 1145.048992] kasan_report_error.cold+0x8a/0x1b9 [ 1145.053667] ? vgem_gem_dumb_create+0x22c/0x240 [ 1145.058344] __asan_report_load8_noabort+0x88/0x90 [ 1145.063277] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1145.068482] ? vgem_gem_dumb_create+0x22c/0x240 [ 1145.073155] vgem_gem_dumb_create+0x22c/0x240 [ 1145.077662] drm_mode_create_dumb+0x27c/0x300 [ 1145.082178] drm_ioctl_kernel+0x208/0x2a0 [ 1145.086341] ? drm_mode_create_dumb+0x300/0x300 [ 1145.091013] ? drm_ioctl_permit+0x210/0x210 [ 1145.095346] ? __might_fault+0x192/0x1d0 [ 1145.099422] drm_ioctl+0x5a0/0x9e0 [ 1145.102969] ? drm_mode_create_dumb+0x300/0x300 [ 1145.107821] ? drm_getstats+0x20/0x20 [ 1145.111632] ? __lock_acquire+0x6de/0x3ff0 [ 1145.115892] ? __lock_acquire+0x6de/0x3ff0 [ 1145.120135] ? drm_getstats+0x20/0x20 [ 1145.123941] do_vfs_ioctl+0xcdb/0x12e0 [ 1145.127840] ? lock_downgrade+0x720/0x720 [ 1145.131998] ? check_preemption_disabled+0x41/0x280 [ 1145.137019] ? ioctl_preallocate+0x200/0x200 [ 1145.141437] ? __fget+0x356/0x510 [ 1145.144898] ? do_dup2+0x450/0x450 [ 1145.148439] ? lock_acquire+0x170/0x3c0 [ 1145.152416] ? finish_task_switch+0x118/0x760 [ 1145.156926] ksys_ioctl+0x9b/0xc0 [ 1145.160385] __x64_sys_ioctl+0x6f/0xb0 [ 1145.164278] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1145.168869] do_syscall_64+0xf9/0x620 [ 1145.172686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.177871] RIP: 0033:0x7f7002264639 [ 1145.181587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1145.200931] RSP: 002b:00007f70007b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.208646] RAX: ffffffffffffffda RBX: 00007f7002385050 RCX: 00007f7002264639 [ 1145.215919] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1145.223193] RBP: 00007f70022bfa41 R08: 0000000000000000 R09: 0000000000000000 [ 1145.230550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.237834] R13: 00007ffd3fde192f R14: 00007f70007b6300 R15: 0000000000022000 [ 1145.245113] [ 1145.246739] Allocated by task 25209: [ 1145.250459] kmem_cache_alloc_trace+0x12f/0x380 [ 1145.255127] __vgem_gem_create+0x44/0xf0 [ 1145.259187] vgem_gem_dumb_create+0xcf/0x240 [ 1145.263591] drm_mode_create_dumb+0x27c/0x300 [ 1145.268091] drm_ioctl_kernel+0x208/0x2a0 [ 1145.273023] drm_ioctl+0x5a0/0x9e0 [ 1145.276571] do_vfs_ioctl+0xcdb/0x12e0 [ 1145.280457] ksys_ioctl+0x9b/0xc0 [ 1145.283913] __x64_sys_ioctl+0x6f/0xb0 [ 1145.287797] do_syscall_64+0xf9/0x620 [ 1145.291777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.296956] [ 1145.298583] Freed by task 25209: [ 1145.302037] kfree+0xcc/0x210 [ 1145.305158] drm_gem_object_free+0x91/0x1c0 [ 1145.309480] drm_gem_object_put_unlocked+0xd1/0x180 [ 1145.314501] vgem_gem_dumb_create+0x10c/0x240 [ 1145.319004] drm_mode_create_dumb+0x27c/0x300 [ 1145.323483] drm_ioctl_kernel+0x208/0x2a0 [ 1145.327618] drm_ioctl+0x5a0/0x9e0 [ 1145.331242] do_vfs_ioctl+0xcdb/0x12e0 [ 1145.335114] ksys_ioctl+0x9b/0xc0 [ 1145.338560] __x64_sys_ioctl+0x6f/0xb0 [ 1145.342426] do_syscall_64+0xf9/0x620 [ 1145.346216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.351396] [ 1145.353014] The buggy address belongs to the object at ffff8880a9e9f080 [ 1145.353014] which belongs to the cache kmalloc-512 of size 512 [ 1145.365666] The buggy address is located 256 bytes inside of [ 1145.365666] 512-byte region [ffff8880a9e9f080, ffff8880a9e9f280) [ 1145.377539] The buggy address belongs to the page: [ 1145.382468] page:ffffea0002a7a7c0 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0 [ 1145.390695] flags: 0xfff00000000100(slab) [ 1145.394826] raw: 00fff00000000100 ffffea00028dfa48 ffffea00028de5c8 ffff88813bff0940 [ 1145.402688] raw: 0000000000000000 ffff8880a9e9f080 0000000100000006 0000000000000000 [ 1145.410547] page dumped because: kasan: bad access detected [ 1145.416243] [ 1145.417855] Memory state around the buggy address: [ 1145.422779] ffff8880a9e9f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.430122] ffff8880a9e9f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.437479] >ffff8880a9e9f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.444814] ^ [ 1145.448170] ffff8880a9e9f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.455519] ffff8880a9e9f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1145.462859] ================================================================== [ 1145.470203] Disabling lock debugging due to kernel taint [ 1145.484553] Kernel panic - not syncing: panic_on_warn set ... [ 1145.484553] [ 1145.491953] CPU: 1 PID: 25209 Comm: syz-executor.2 Tainted: G B 4.19.211-syzkaller #0 [ 1145.501329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1145.510677] Call Trace: [ 1145.513276] dump_stack+0x1fc/0x2ef [ 1145.516914] panic+0x26a/0x50e [ 1145.520110] ? __warn_printk+0xf3/0xf3 [ 1145.523998] ? preempt_schedule_common+0x45/0xc0 [ 1145.528755] ? ___preempt_schedule+0x16/0x18 [ 1145.533164] ? trace_hardirqs_on+0x55/0x210 [ 1145.537492] kasan_end_report+0x43/0x49 [ 1145.541458] kasan_report_error.cold+0xa7/0x1b9 [ 1145.546109] ? vgem_gem_dumb_create+0x22c/0x240 [ 1145.550756] __asan_report_load8_noabort+0x88/0x90 [ 1145.555675] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1145.560853] ? vgem_gem_dumb_create+0x22c/0x240 [ 1145.565510] vgem_gem_dumb_create+0x22c/0x240 [ 1145.570084] drm_mode_create_dumb+0x27c/0x300 [ 1145.574657] drm_ioctl_kernel+0x208/0x2a0 [ 1145.578911] ? drm_mode_create_dumb+0x300/0x300 [ 1145.583575] ? drm_ioctl_permit+0x210/0x210 [ 1145.587885] ? __might_fault+0x192/0x1d0 [ 1145.591927] drm_ioctl+0x5a0/0x9e0 [ 1145.595460] ? drm_mode_create_dumb+0x300/0x300 [ 1145.600116] ? drm_getstats+0x20/0x20 [ 1145.603907] ? __lock_acquire+0x6de/0x3ff0 [ 1145.608126] ? __lock_acquire+0x6de/0x3ff0 [ 1145.612351] ? drm_getstats+0x20/0x20 [ 1145.616144] do_vfs_ioctl+0xcdb/0x12e0 [ 1145.620024] ? lock_downgrade+0x720/0x720 [ 1145.624154] ? check_preemption_disabled+0x41/0x280 [ 1145.629154] ? ioctl_preallocate+0x200/0x200 [ 1145.633547] ? __fget+0x356/0x510 [ 1145.637076] ? do_dup2+0x450/0x450 [ 1145.640597] ? lock_acquire+0x170/0x3c0 [ 1145.644550] ? finish_task_switch+0x118/0x760 [ 1145.649043] ksys_ioctl+0x9b/0xc0 [ 1145.652487] __x64_sys_ioctl+0x6f/0xb0 [ 1145.656354] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1145.660919] do_syscall_64+0xf9/0x620 [ 1145.664705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.669875] RIP: 0033:0x7f7002264639 [ 1145.673569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1145.692455] RSP: 002b:00007f70007b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.700147] RAX: ffffffffffffffda RBX: 00007f7002385050 RCX: 00007f7002264639 [ 1145.707394] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1145.714643] RBP: 00007f70022bfa41 R08: 0000000000000000 R09: 0000000000000000 [ 1145.721895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.729149] R13: 00007ffd3fde192f R14: 00007f70007b6300 R15: 0000000000022000 [ 1145.736585] Kernel Offset: disabled [ 1145.740194] Rebooting in 86400 seconds..