b1a41b8a371309061c59bacfe5f59959a137cc40162368091b7c052200716379c79a5de0da8f54d125e6f44ca6b67a14b858ce1e6a2bd1a75d5a001cfb12c881a938e6017069aed971ea97bdc4d9522c107d8e081e785852ab2d5c84d0a699a72dd8fe47336d0741c0aaa6a3db149897742a78bf6f59fe046502a746d0ed7548bccc8597dfcaf2f1cd19268a0fd0c8651e8bd5a27b5e6462ed0ca965a7093e2e1eb7b68ed9cbec861c196a9242b45e061c2ef49e6d3db4173e97f7cfcbe2f0c2399b728f205d9fb85a1645f81e8e6a3a9ca6f21360afb02b8e8b24564dd39062d4ce33acd0eaa5bc6e00ffb93af927d615b18702e20e48816924744ea30a499644726293575ed64f4fe7ac143c1b22c8c555a378686215acd597a19eec4f8b2a726c175c65124a26c6a06706eb355c010f1804e14cdb0e1b7ce380ebb818b0617aa883b108c2df832f8df28bbcd3df41e68476444799a3b812c8a9660a904718bb910ea8bb7b0d21f18eeb6a43cc389866786b1c9c4f725a757634b409044831f500ff6f7f3f9b6c9f1a7e41186e3a55c007fe03b1f038f9328b57e08a572ac2755b0790119072ec9695deb8e3752cdf8fb01b41f7d68083b92bbfd73bf141cf38d53e7a95e1aea7ceebfa93a64ef02918e863e60c5e8ff1e378548f692b5fa542ab75fd50bd24bd5dbb34f61976cc643a14a1a3b7c56f70aec132e40dc40623c03af8320552349e58c5f009d11e8f62fc3367794347f24701ef8178043a743f480462570d4ead931df657d8ddccd39c7a51c5ea07ef2f81b2f4d75680742962436879bb3b0bca4f1a5635bede438adc3f66c63c2e67715f11f2acc4f9169f91e6010fad57519fbf12cd988f5ca3e9e94f88d225cc2385299df6b1ecdba746ff32c35945abf02197416ac3db6a8319018ac31f699a50e7f8c69f377a53e1f0e38ea7096e6d60c9a9e4ca491bbadc833a40036425096ae21d1af31aaf5e7c1d59b78ef84faeff17402e5fce9aecd489b6fab195aed393e614aa7631cb801b96adf59d7f43b0fe4f5c0a0903635f31907e30184ef05cb51f11ca0721db0057a5ea1bf1a37b6fa44b8b8a195374996bcb2352b5d8666fb96a72355095bcecc1e1c8fe6ec288d7e3ff4c5e46e79f076e7410e63b17c306be7a3c1f414da5ac6d2fa76aadfd95d5acab9d81b1ad11"}, {0x48, 0x116, 0x10000, "738fa5d9c827dace4fa2fa1e9b05b6c147bd06e9e01bde64e78a7a77106cfe7557b46b84dee7cd5c5567e53737164a4bca05fd"}], 0x1260}}, {{&(0x7f0000004840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f00000048c0)="272c7ad41685b82af44d3322d66704ec51071019dc728e3153ab02f43fcc4fac1fa0178bd3ac065e5d7c971583d222aa949f215a8db76214d79f34067eb6f92014ee6eff852f28b74a3aba7157b5f3a13133e9f882e862ea8dbb89f405da38a85f80cea1b6a7a8bf04512c36359a37329a51ef2804", 0x75}, {&(0x7f0000004940)="8f66da3b04f8902f6d471e61385d30e33b0adceaf9b06254cfe767d4e3c5b2d651ca6614b7bc5b3968802a7bd7f85437671b78d169bc0c51b55a451d5a5eb496bad657ca0b780cfc6faefe22e5f9649976f8588ad601b61b3d668d4db7b0c8360b23545b276949e188c6bd001b6baf8c4951b28347ad1a52ec276697fc40a15b7d114a9aecbd92f2e1b1eb0a26f4b18035bf7df824f9704aa48e9ddae509327d240bedc409d777b244a2a6d02ba90b1d8df795ec44c79e747842254028ca5df23904c29648472c685684c0b99bf77a3d7f5bb8359142d563bb64d667c62566a30b2b2a9efffebe620f91fd93dc4d327e", 0xf0}, {&(0x7f0000004a40)="c434093e5db1c963ecbbaac1581e816e86eec39286e19a682f566385e4dc63ef9135b58d3f02002d330baf8ffc6456a18ae09630a505cd37c4deedc9163683", 0x3f}, {&(0x7f0000004a80)="cf0a4b961da03c45df192f37bfc163ec5b5f87c059a5d0a873b2293026a17a1cc051736c29197058358e218538d9208844c43ff32066daabfe98673d7a97654163810ce846", 0x45}, {&(0x7f0000004b00)="5cb95438b78059edf5abb02898d20419aeeeb3ab255c89aeb628eebc643e1f7d", 0x20}, {&(0x7f0000004b40)="485c994c47c6f38fe6a9455f21a30f1b5d3fea52ac9352efc2b0a01b28df158ffc74c5f142abacd6ac8f8d710a2dc8fa1471ad18af7eedd28910905e345d4ef5319b3f4bdf9fb8fd8f3539eded7e505bf03e4e000503ea0f6a20aad9056a7e862aa85f7e9183b65efec9553698c2081ed5b596f258106e272602f4f6e7b9775d84106a6e472fd5a12d7100", 0x8b}, {&(0x7f0000004c00)="67d9361fc7f93fd33761d9eec5b9ac41d757d1c07860bf7d786acc64bf56e3ee9e1e8163f6f7fd248ef9d9b081a987f264418f0a", 0x34}, {&(0x7f0000004c40)="adefbebb8b8b52ce8919ca2c6222d2d1ea9993265af549a05ed4e931a48f4e219c9ce98d13c118f274942070b189ea15fa47600a6db62d63cd45a98903f06802bbb3989dbb872418e24f0f83a1e66f4efee231f573f7fc0fe9da1b3fb19a11bbf675dab580b1bc87d76b5ee0aff70d9f5cfd98", 0x73}], 0x8, &(0x7f0000004d40)=[{0xe8, 0x1, 0x6, "4171ce84751ab752e6dd83b4af93634550ea5c8c2d0f1ff61ffb7466dd0357d87cb52eb110f0d68210880b7dbf94a34530f82fa123097e01f5b44123984cde3a8479c4abe7bb90ee62f7f7b83c46fbb11d92900603d8c6d8c9d7720560bdc6f8fd3646f3d682a107dfbf7dc11084ac6afedb2a332f517b00a547bc9fefe9e4ba90aa6f9441e0d80d0dd740a57f9b975b01ecf2bfe9be96015e857d20ceec0368028f9e615e1ed43769740a6d8c89d51e2be833072d4f07f70ca4cbe031147645748208baaf3d5fa115f675cf2b7d0c28542e20c1b62b"}, {0x50, 0x110, 0xfff, "d5525c4da2fba7511895d617db753c025d20f67ad218412ba4156008e5024a0d2531d01740389f5f356a69e9ba50fe2f2e33c294986eec7126e04dfbda"}, {0x1010, 0x10d, 0x8, "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"}, {0xa8, 0x10a, 0x1, "12af59c9e88128a58dfca6dc375d690854499e7384149d74d82be12460e9ed97b69193a2e2e877c9a29cfe86c90286d214c8f6211cea549bd62e172fcb7f673c22c618be742394f97db45ac3b9d3a2b7a948b150f12a26b6f5e7b614f85543765e4bf6ca5ec5b089946dab4feea594ffc14e2473822df7405543109d912b5a4588949c2c7db2f62d67333bebac2b19b53d8ccb68572a63d7"}, {0x110, 0x1, 0x2, "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"}, {0xc0, 0xff, 0xea, "83b800f584303a3dcac08de52634c5316ef31d85a864dc3c59827284d5c7537de65035729ed7c6ed6673796423706c5cbafeb634207cf6310fa1e12a0481b31c7897a4f4fe268841a5d007df1f889d51227651980b2c1d0e4303fcc8c0b3998402349663ad127212cb75427e11fb7b20ac86d5236dc39dda6fe328bfd7365a77ac66006e53f2df0113801c7b26697be5654b9bdd46d934aaa408edc09590980c31984e04be3703a9519f615f619cbf"}], 0x13c0}}, {{&(0x7f0000006100)=@nfc={0x27, 0x1, 0x1, 0x6}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000006180)="4e0ed3013af114d004faff7f37c154e480cfce173837bf6b165b3781833306c3d575ae2819a63e8e8ef8c3d1652c55707f98a50678b8925bdb3e17afa8c42c2edd2372e522797986f604c62f5e417bfb98027b4a2253d184b4d703f3ded3cdd85e6951c3c8c8e565e5a94196bd073a0344a05da1e0985e5b1987d4b4f3c1ebe44d5b737944aa2915a0ad9b9b6cf30d85938d263bca84a15b97542d31ed2371c260298b102fa35739e0798d29666ca0a011f4", 0xb2}, {&(0x7f0000006240)="e95687ca756104838b542ded976acad4b38d9735045238474053e2c9c1fd5bf28e813b14eb4600625e026661f69cb0ccb57941cfc8fe4cd31458f9353ba40afe83311d027d", 0x45}], 0x2, &(0x7f0000006300)=[{0xb0, 0x112, 0x6, "8cf8b6f03647ff68a0b08c623a24e37374f2caf3b5ac6fb83f10fb8c56222fa1ce83aa34f1ef389a38b701ac20bf1a87e8544624f4808ea00077d71dfe8eff7a11c22156a180e78e26646a843818ce1d8b97dd86f7f0a0de6251e799160c07a12a3562466e03808c5831ebaccaeb278b5fc17aeca6d36f12af13509b61d978b9c9d11187512ed1aee4317c88053db6a8d99958ad91209d2d4b4f541a0c61ff"}, {0xf8, 0x104, 0x0, "9c0fe5f6f7d41f31aeffc73d338e06856d8e60b655b242c92c9624ff82853d8f7995ce5567aa0fcda946366dc994879ac9dc7b7b2cd25d8b19550b8f7b11aa64f364707f4efe44035e61fae5866bc4ab7e221bf9fe51c9895291fb170a2445f9baa9132d0d16385eb75e8939df2cb330a9de608d5f4bda3d66d0fb85a463e419e94cecb2c7ad001bf838af263b438a57620b825bd99c4fda9662d38880fc2da5d43154be6373ee936fc374ee9adc35386cbf292c9f2186975dbdb945855e3120ffd14ecb72b7866de3c9a1094361cde014c5712ab61a57844b52d329e09247b856141a"}, {0x18, 0x0, 0x80000000, "a362ab7fb73d9e"}, {0x70, 0x10d, 0x82c, "3384feaace7e5086a72a5d186da665d7cb5bdd7e60c76b060141772e64264e26bf116f3a167d1f5810e4cfe0b008be40f86b0857ab69163a44f35d21add594611cd6c4278bbc07787d51dc3b35742208c8b92f77d12cc5ce9b85985feee8c4"}, {0xc0, 0xff, 0x0, "c48e5da1c5431b8a97fe9edc1ba9edb08c9b6de1c87436203ec92ffeeb055a80c9b50266f49676ff68cc4d0820717f2e61608fb378dc1abc68e9ce1d5e968d17e1cbe4f34b5b2adec9b6c3dc8e4a69987391a29da191ec794c092d7185955abe772101f09af662ba5ed3023b41fa627900d3e0f8130a607c78cce0732a576965b7e513947d95b55e8a4117a48164f68cdc7a7a9c42d57c645778adb1feeaade7e1ab44015eba61f13d82d113ff5c49c4"}], 0x2f0}}, {{&(0x7f0000006600)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000087c0)=[{&(0x7f0000006680)="54c7c9c500c7df88e380c167acf106f4164c69b54675e8d10460053d8ab3678f42b23cb93793abf0a14f993e9759772c6dbfd7455a18009cd96025d1f30202298c1dcd7c487a6124c292f3c2b2d69ed58186364593e4c44bd410c5d1cd6c6871a343b78d08169ab426ff50764958aa10956a4de43a355064389ad56062b2d473e41cfe517d5a8d0442656c4d6300d842a48f48c0f4f9f10a83bae23d53f0a309427b1276d31f01e87ccf524a488ed1d569", 0xb1}, {&(0x7f0000006740)="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", 0x1000}, {&(0x7f0000007740)="4191def41a608e14d78ec7bd469ef37215dc998ffc17a16f22de53a5fd9c2fb110a360fa647e7b6a5e39444c8a4f1617f75974ce4fa1b092bc681c7762cfa6e1f999d8c685d5ba85006e9af2e01afd2fc57c4fde542439f7357257a1e762fa0e7a689f656e38c6ca2b", 0x69}, {&(0x7f00000077c0)="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", 0x1000}], 0x4, &(0x7f0000008800)=[{0x70, 0xff, 0x1, "51db8088fad8efe058f0dc6c005eb4dd999f4028b502faf4bd11bd942745f80fde622d58c1750ffd0ff44b18d0d1ac639407165373b77842f0983ec6a495d1a1d6c14d4affc82aca1a4814ed3883e0a392f1bb8ede9cefb042dcf7ab"}, {0x90, 0x84, 0x101, "fa93f7b0aff9f0f2ecf7bd66c2195ff024e51cebf871fa24821b9428c8c2e92c273a8efe76513938b23436e783d35524386d01323644ec4a929fd6d08127e636be25a129ee5c4aae1699e6d44a3863844ed6d5f8fb233a25f727da7acfb631b416204593cc32551c2b753b7dbaabd5a6e723c14975d94dc88f3d"}, {0xa0, 0x109, 0x3a02, "69bd004f0fc318385264bb11ead9afa8530148983c59d44897300689021ade16bdcdfe277d32121916dfc9f28d21068c4181d3882e132b9c2be1cb5fb9e5a4689fc031bad54a5938e4e4595f48378c94bae298b03f76f334108b3e36f60d710c4001f198e48dbfa17ed9efc4ea6a01ed4f6431214c3aadc2d13b34d4d68317b99a450715c49d4c3454b668baeac7"}, {0x48, 0x8, 0x7fffffff, "3ab3b9423f5d07b58a3b36998f6c7d258fefc0e65e962b3da129f7b1ba3f78527113e28b70c2a60abdd99cf099791e094983205cdc"}, {0x58, 0x103, 0x4, "e9d9f4c4bac27a8e441761541b105a4816894efeda1549da52647b13ac27b3a5471c111d5ff492a01e84c5843444beb6e166eefba2d0f24081f87f90a6c97dd2dbdc"}, {0x70, 0x10a, 0x4, "7c72094b7bd961aa8ec84647df95335a94fb3812270a18f792634f3cfaaf28118d4995a662a9336f47e5e31b86c02b9a6577cc8ca59bf9f350922d69c3e7c18aeb71d36d17915b45f0229e489b8c8f8de624472f6ad48ed05c1ace"}, {0xe0, 0x101, 0x62b, "388b972ad43f6b738ae1b56d48b515fb863d211d7a933333cfb255e54a7e4ea1f2c6200099a646ca15357f1dbf02869a44ebe0c3797852213f1e2eb972e668c3918560b493027a3f5e09f86a42ef656f18cdd6c463467dc7fa9715296a2368f23a0cfbb240784e48d7ee667e80838b80341f01946cf13a4c95d30dea646cbd3b0cbb3f41b6b86b9ace6da74205b83be6f6c50a1838a8d3fa605dfb31e8fb22e6dac26b60a0282f13162848b0329f9bab1f68150ed61c4fd25c38d05cbcbf49d0b0a86bdda6b8b077205062cef9c665"}, {0xe8, 0x10b, 0x81, "a282f66a71432790e5e8071e83ed83f75b4ed311282a8a1c6018bbf94fe45a4c9fee8942be3733b64d827213e40c803f82ff1870172be4b6d71bb301d5e97dd3f44bf293ae2d5e7c85cc185c72f664236d138b5dc70d50fed868174fe241eefb365b71c7029a5dbf8068e5dd6a620e294e22ae59c59909b219a57c8861164077d00dbf9471a8aa4d1568f315c74a631dddaa329813b13d7cafe7d8446c8c0e704471dfca4b3e3595e9ec06d44c605b774e49abce6249fe90545b33488bb18b89d897c396a63501d8daa9265d9fe40addbfdda85450af"}, {0x98, 0x1, 0x5, "9d76c0694267725230fcf90fde1778cedca8c5424989626b3ce5bbdf074334e7c107154c611685ee19af8c549226f275e4329939df2437bcec625b1169ffc6e5a2e916195808c0bd77f514f30c76ee73433151d87eb8e75bc7dacb08b947b5b4aecae5fc8c9eeb10513d92808d7a8576c744de1ffc71151f06703decca8a88c068"}], 0x510}}], 0x4, 0x8000) (async, rerun: 32) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async, rerun: 32) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (rerun: 32) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 00:29:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}], 0x3, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_pts(0xffffffffffffffff, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x9, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x7, 0x9, 0x2, 0x20, 0x1}, @map_fd={0x18, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x6, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x1, 0x6, 0xb, 0xa, 0xfffffffffffffff4}, @exit, @generic={0x80, 0x8, 0x6, 0x7, 0x4}], &(0x7f00000012c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x5, 0xe8d, 0x4}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) poll(&(0x7f0000000040)=[{r0, 0x80}, {r2, 0x404}, {r3, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 00:29:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1, 0x0, 0x2) 00:29:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}], 0x2, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:21 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000980)=""/181, 0xb5}], 0x2}, 0x40010002) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, 0x0, 0x200) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000000140)={0x0, 0x989680}) rt_sigtimedwait(&(0x7f0000000080)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000040), 0x8) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xa043, 0x1c00}, {}, {0x3, 0x7, 0x800}, {0x1, 0x0, 0x1800}, {0x1, 0x3fc, 0x1000}], 0x5, &(0x7f00000001c0)={0x0, 0x989680}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x2, 0x1, 0x8, 0x100}]}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000380)={0x9, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) clock_gettime(0x1, &(0x7f00000000c0)) 00:29:21 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}], 0x3, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x7f, 0x8001) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 00:29:21 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000980)=""/181, 0xb5}], 0x2}, 0x40010002) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, 0x0, 0x200) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000000140)={0x0, 0x989680}) rt_sigtimedwait(&(0x7f0000000080)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000040), 0x8) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xa043, 0x1c00}, {}, {0x3, 0x7, 0x800}, {0x1, 0x0, 0x1800}, {0x1, 0x3fc, 0x1000}], 0x5, &(0x7f00000001c0)={0x0, 0x989680}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x2, 0x1, 0x8, 0x100}]}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000380)={0x9, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) clock_gettime(0x1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000780)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000980)=""/181, 0xb5}], 0x2}, 0x40010002) (async) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, 0x0, 0x200) (async) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000000140)={0x0, 0x989680}) (async) rt_sigtimedwait(&(0x7f0000000080)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000040), 0x8) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xa043, 0x1c00}, {}, {0x3, 0x7, 0x800}, {0x1, 0x0, 0x1800}, {0x1, 0x3fc, 0x1000}], 0x5, &(0x7f00000001c0)={0x0, 0x989680}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x2, 0x1, 0x8, 0x100}]}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000380)={0x9, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) (async) clock_gettime(0x1, &(0x7f00000000c0)) (async) 00:29:21 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}], 0x2, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_pts(0xffffffffffffffff, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x9, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x7, 0x9, 0x2, 0x20, 0x1}, @map_fd={0x18, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x6, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x1, 0x6, 0xb, 0xa, 0xfffffffffffffff4}, @exit, @generic={0x80, 0x8, 0x6, 0x7, 0x4}], &(0x7f00000012c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x5, 0xe8d, 0x4}, 0x10}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {r2, 0x404}, {r3, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 00:29:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x7f, 0x8001) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x7f, 0x8001) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) 00:29:22 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000980)=""/181, 0xb5}], 0x2}, 0x40010002) (async) preadv(r2, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, 0x0, 0x200) (async) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x7fff, &(0x7f0000000140)={0x0, 0x989680}) (async) rt_sigtimedwait(&(0x7f0000000080)={[0xfffffffffffffffe]}, 0x0, &(0x7f0000000040), 0x8) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x2, 0xa043, 0x1c00}, {}, {0x3, 0x7, 0x800}, {0x1, 0x0, 0x1800}, {0x1, 0x3fc, 0x1000}], 0x5, &(0x7f00000001c0)={0x0, 0x989680}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x2, 0x1, 0x8, 0x100}]}) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000380)={0x9, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) (async) clock_gettime(0x1, &(0x7f00000000c0)) 00:29:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c6530008dc5734482915dbe6aa8c83ec9a3555f6eb5539fa4f64031a0d892d67f1ed92aed65ce2ed8cac3dfdca5b547b90c689249d94826d3e37eeb1960a44c9e74ed806a529e3f08090b8b6b00da37adb660483c1aa69f65451c120c1a50949d05390700ad5f07f247e8287ed8257390dd980718ef36886e65fc882f87f1a5f1d1410544fe5e070000000000000000b206f297b6eb2b03f00000000000000005bcd2617ca9a7eb9906e802f1e735ee46f3a18c3522a6869d4d6aa3f60aea4e5f9c25db6624ecfb4789f863e5ccd5d142203130e79883e3db1d6ddc982e5548ed7b7bbbfe5dac0f96bba11606fc3a5d4c63fb19c12d83afcca98dcc7a115d1be2338a3fdd8015579ebd24d85f0ca0274f5b02a0870f3d02ece74736eb5d4e9130ec8984aad0126a3cb60e5d913da0ea80534373fd7c6ca67f72aff0d0d56ff5d84676ed906c6c034976edb552bb910eb19e772ce862a2c913e007d2e1f7397b998e357f7a976a01f8cd64bbd0c34bbcca9d4baf2157adeb6a7fdbe526a34908d90abcf80916362f4483c2b869c5ebb3f993404dcea6543e333607e20ca6af5682f649266715dc2148e10643fb8b7fb158fbc104f06714a65d9d78271f2878fc374b4bb24c09b738d30e9aeafcf31dce51805cf079ab41d10face0fa2594bac3daf45a62338d3e1628c48b3acf4be3f8bb36c10616fbafd57dbc613d4f80ad8d0b39feff76aaa2be53c67db1f54e60c85fdbf6a1142eae9df47a0fc2e0a919088f55738ce732cd3e5d6de3deeac65e347e583088403e226fd6998a92a1825cd9f2d9466fc4fcd96f91bbc1f1714f4c9b72a21f7771b7a66aaf7eb134a96693db1569e37491948d919f001ff10c40f6cf1b012dad10905fdf75413f11a6d25bc4725a100859c0d64d68d8609c8532a305e43eaa198f4540a9f122d5378824a381c748445911"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:22 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) 00:29:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x7f, 0x8001) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 00:29:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:22 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) 00:29:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_pts(0xffffffffffffffff, 0x20000) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {r2, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 00:29:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:23 executing program 2: r0 = syz_clone(0x80000000, &(0x7f0000000040)="85b211499b1926a2130dede1bcf04fd326e299241835651ff9d2f287eeeb068bc32eb96462f37577fdca4c", 0x2b, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)="e713e3ad68d027992e0341c0eb29b10dc5b115369804b92b42c5110a491a60fb04eae4d198c94fb7f7387756fc82122ba9e260724b6998305284b9dd899f770e695b2281f5d8106d269c4d6f56b646a450099504b13b98e68468f0a07463e3a81947e73bbe4c43ab544789f8748940695fffd7530458e8786b32be94d8a44cfa1fab76e62896443a9da10d834284c2ceb5b02fd48cfc8e280dfae2b40cccf01f26768ed96dce77fca07df81d2531439ee63e435dc1b25cc1fd8edde97d1820") wait4(r0, &(0x7f00000001c0), 0x8, &(0x7f0000000300)) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:23 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) 00:29:23 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) 00:29:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5c, @local, 0x4e22, 0x0, 'wlc\x00', 0x6, 0xfffffff9, 0x3b}, {@rand_addr=0x64010100, 0x4e22, 0x4, 0x81, 0x0, 0x4}}, 0x44) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x9}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x38}, 0x91}, 0x1c) waitid(0x0, 0xffffffffffffffff, 0x0, 0x81000000, 0x0) 00:29:23 executing program 2: r0 = syz_clone(0x80000000, &(0x7f0000000040)="85b211499b1926a2130dede1bcf04fd326e299241835651ff9d2f287eeeb068bc32eb96462f37577fdca4c", 0x2b, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)="e713e3ad68d027992e0341c0eb29b10dc5b115369804b92b42c5110a491a60fb04eae4d198c94fb7f7387756fc82122ba9e260724b6998305284b9dd899f770e695b2281f5d8106d269c4d6f56b646a450099504b13b98e68468f0a07463e3a81947e73bbe4c43ab544789f8748940695fffd7530458e8786b32be94d8a44cfa1fab76e62896443a9da10d834284c2ceb5b02fd48cfc8e280dfae2b40cccf01f26768ed96dce77fca07df81d2531439ee63e435dc1b25cc1fd8edde97d1820") wait4(r0, &(0x7f00000001c0), 0x8, &(0x7f0000000300)) (async, rerun: 32) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') (rerun: 32) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5c, @local, 0x4e22, 0x0, 'wlc\x00', 0x6, 0xfffffff9, 0x3b}, {@rand_addr=0x64010100, 0x4e22, 0x4, 0x81, 0x0, 0x4}}, 0x44) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x9}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x38}, 0x91}, 0x1c) waitid(0x0, 0xffffffffffffffff, 0x0, 0x81000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5c, @local, 0x4e22, 0x0, 'wlc\x00', 0x6, 0xfffffff9, 0x3b}, {@rand_addr=0x64010100, 0x4e22, 0x4, 0x81, 0x0, 0x4}}, 0x44) (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x9}) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x38}, 0x91}, 0x1c) (async) waitid(0x0, 0xffffffffffffffff, 0x0, 0x81000000, 0x0) (async) 00:29:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:23 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) 00:29:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_open_pts(0xffffffffffffffff, 0x20000) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {r2, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 00:29:24 executing program 2: r0 = syz_clone(0x80000000, &(0x7f0000000040)="85b211499b1926a2130dede1bcf04fd326e299241835651ff9d2f287eeeb068bc32eb96462f37577fdca4c", 0x2b, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)="e713e3ad68d027992e0341c0eb29b10dc5b115369804b92b42c5110a491a60fb04eae4d198c94fb7f7387756fc82122ba9e260724b6998305284b9dd899f770e695b2281f5d8106d269c4d6f56b646a450099504b13b98e68468f0a07463e3a81947e73bbe4c43ab544789f8748940695fffd7530458e8786b32be94d8a44cfa1fab76e62896443a9da10d834284c2ceb5b02fd48cfc8e280dfae2b40cccf01f26768ed96dce77fca07df81d2531439ee63e435dc1b25cc1fd8edde97d1820") wait4(r0, &(0x7f00000001c0), 0x8, &(0x7f0000000300)) (async) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5c, @local, 0x4e22, 0x0, 'wlc\x00', 0x6, 0xfffffff9, 0x3b}, {@rand_addr=0x64010100, 0x4e22, 0x4, 0x81, 0x0, 0x4}}, 0x44) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x9}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x38}, 0x91}, 0x1c) waitid(0x0, 0xffffffffffffffff, 0x0, 0x81000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x5c, @local, 0x4e22, 0x0, 'wlc\x00', 0x6, 0xfffffff9, 0x3b}, {@rand_addr=0x64010100, 0x4e22, 0x4, 0x81, 0x0, 0x4}}, 0x44) (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x3, 0x3, 0x9}) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x38}, 0x91}, 0x1c) (async) waitid(0x0, 0xffffffffffffffff, 0x0, 0x81000000, 0x0) (async) 00:29:24 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/42, 0x2a}, {}], 0x2, 0x0, 0x0) 00:29:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 0: rt_sigtimedwait(&(0x7f0000000000)={[0x200000000]}, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x6, 0x100000000, 0x7fffffff, 0xffff, 0xfffffffffffff801, 0x4, 0x11, 0x7ff}, &(0x7f0000000080)={0x7fffffff, 0x10000, 0x2, 0x171e, 0x400000000, 0x9b, 0xffffffff, 0x7f}, &(0x7f00000000c0)={0x9, 0x10001, 0x2, 0x7, 0x10000, 0x2d6897c7, 0xffffffffffffffff, 0x4}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:29:24 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/42, 0x2a}, {}], 0x2, 0x0, 0x0) 00:29:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {r2, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 00:29:24 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 0: rt_sigtimedwait(&(0x7f0000000000)={[0x200000000]}, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x6, 0x100000000, 0x7fffffff, 0xffff, 0xfffffffffffff801, 0x4, 0x11, 0x7ff}, &(0x7f0000000080)={0x7fffffff, 0x10000, 0x2, 0x171e, 0x400000000, 0x9b, 0xffffffff, 0x7f}, &(0x7f00000000c0)={0x9, 0x10001, 0x2, 0x7, 0x10000, 0x2d6897c7, 0xffffffffffffffff, 0x4}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:29:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/42, 0x2a}, {}], 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/42, 0x2a}, {}], 0x2, 0x0, 0x0) (async) 00:29:24 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1, 0x0, 0x4, 0x20) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:24 executing program 0: rt_sigtimedwait(&(0x7f0000000000)={[0x200000000]}, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x6, 0x100000000, 0x7fffffff, 0xffff, 0xfffffffffffff801, 0x4, 0x11, 0x7ff}, &(0x7f0000000080)={0x7fffffff, 0x10000, 0x2, 0x171e, 0x400000000, 0x9b, 0xffffffff, 0x7f}, &(0x7f00000000c0)={0x9, 0x10001, 0x2, 0x7, 0x10000, 0x2d6897c7, 0xffffffffffffffff, 0x4}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:29:24 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1, 0x0, 0x4, 0x20) (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {0xffffffffffffffff, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000380)}, {0x0}, {0x0}, {&(0x7f0000001640)}, {0x0}], 0x5, 0x0, 0x0, 0x40000}, 0x4000800) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x400, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x68, 0x1, 0x0, 0x8, 0x0, 0x5, 0x92006, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x40112, 0x4000000005, 0x2, 0x2, 0x22ba, 0x0, 0x9, 0x0, 0x1, 0x0, 0x453}, r3, 0xe, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 00:29:25 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c6530008dc5734482915dbe6aa8c83ec9a3555f6eb5539fa4f64031a0d892d67f1ed92aed65ce2ed8cac3dfdca5b547b90c689249d94826d3e37eeb1960a44c9e74ed806a529e3f08090b8b6b00da37adb660483c1aa69f65451c120c1a50949d05390700ad5f07f247e8287ed8257390dd980718ef36886e65fc882f87f1a5f1d1410544fe5e070000000000000000b206f297b6eb2b03f00000000000000005bcd2617ca9a7eb9906e802f1e735ee46f3a18c3522a6869d4d6aa3f60aea4e5f9c25db6624ecfb4789f863e5ccd5d142203130e79883e3db1d6ddc982e5548ed7b7bbbfe5dac0f96bba11606fc3a5d4c63fb19c12d83afcca98dcc7a115d1be2338a3fdd8015579ebd24d85f0ca0274f5b02a0870f3d02ece74736eb5d4e9130ec8984aad0126a3cb60e5d913da0ea80534373fd7c6ca67f72aff0d0d56ff5d84676ed906c6c034976edb552bb910eb19e772ce862a2c913e007d2e1f7397b998e357f7a976a01f8cd64bbd0c34bbcca9d4baf2157adeb6a7fdbe526a34908d90abcf80916362f4483c2b869c5ebb3f993404dcea6543e333607e20ca6af5682f649266715dc2148e10643fb8b7fb158fbc104f06714a65d9d78271f2878fc374b4bb24c09b738d30e9aeafcf31dce51805cf079ab41d10face0fa2594bac3daf45a62338d3e1628c48b3acf4be3f8bb36c10616fbafd57dbc613d4f80ad8d0b39feff76aaa2be53c67db1f54e60c85fdbf6a1142eae9df47a0fc2e0a919088f55738ce732cd3e5d6de3deeac65e347e583088403e226fd6998a92a1825cd9f2d9466fc4fcd96f91bbc1f1714f4c9b72a21f7771b7a66aaf7eb134a96693db1569e37491948d919f001ff10c40f6cf1b012dad10905fdf75413f11a6d25bc4725a100859c0d64d68d8609c8532a305e43eaa198f4540a9f122d5378824a381c748445911"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 00:29:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/157, 0x9d}], 0x1, 0x0, 0x4, 0x20) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8c80, 0x0) ftruncate(r1, 0x7) 00:29:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8c80, 0x0) ftruncate(r1, 0x7) 00:29:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000380)}, {0x0}, {0x0}, {&(0x7f0000001640)}, {0x0}], 0x5, 0x0, 0x0, 0x40000}, 0x4000800) (async, rerun: 64) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x400, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0x0, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x68, 0x1, 0x0, 0x8, 0x0, 0x5, 0x92006, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x40112, 0x4000000005, 0x2, 0x2, 0x22ba, 0x0, 0x9, 0x0, 0x1, 0x0, 0x453}, r3, 0xe, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 00:29:25 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c6530008dc5734482915dbe6aa8c83ec9a3555f6eb5539fa4f64031a0d892d67f1ed92aed65ce2ed8cac3dfdca5b547b90c689249d94826d3e37eeb1960a44c9e74ed806a529e3f08090b8b6b00da37adb660483c1aa69f65451c120c1a50949d05390700ad5f07f247e8287ed8257390dd980718ef36886e65fc882f87f1a5f1d1410544fe5e070000000000000000b206f297b6eb2b03f00000000000000005bcd2617ca9a7eb9906e802f1e735ee46f3a18c3522a6869d4d6aa3f60aea4e5f9c25db6624ecfb4789f863e5ccd5d142203130e79883e3db1d6ddc982e5548ed7b7bbbfe5dac0f96bba11606fc3a5d4c63fb19c12d83afcca98dcc7a115d1be2338a3fdd8015579ebd24d85f0ca0274f5b02a0870f3d02ece74736eb5d4e9130ec8984aad0126a3cb60e5d913da0ea80534373fd7c6ca67f72aff0d0d56ff5d84676ed906c6c034976edb552bb910eb19e772ce862a2c913e007d2e1f7397b998e357f7a976a01f8cd64bbd0c34bbcca9d4baf2157adeb6a7fdbe526a34908d90abcf80916362f4483c2b869c5ebb3f993404dcea6543e333607e20ca6af5682f649266715dc2148e10643fb8b7fb158fbc104f06714a65d9d78271f2878fc374b4bb24c09b738d30e9aeafcf31dce51805cf079ab41d10face0fa2594bac3daf45a62338d3e1628c48b3acf4be3f8bb36c10616fbafd57dbc613d4f80ad8d0b39feff76aaa2be53c67db1f54e60c85fdbf6a1142eae9df47a0fc2e0a919088f55738ce732cd3e5d6de3deeac65e347e583088403e226fd6998a92a1825cd9f2d9466fc4fcd96f91bbc1f1714f4c9b72a21f7771b7a66aaf7eb134a96693db1569e37491948d919f001ff10c40f6cf1b012dad10905fdf75413f11a6d25bc4725a100859c0d64d68d8609c8532a305e43eaa198f4540a9f122d5378824a381c748445911"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0xffffffffffffffff) 00:29:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {0xffffffffffffffff, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8c80, 0x0) ftruncate(r1, 0x7) 00:29:26 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0xffffffffffffffff) 00:29:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000380)}, {0x0}, {0x0}, {&(0x7f0000001640)}, {0x0}], 0x5, 0x0, 0x0, 0x40000}, 0x4000800) (async, rerun: 64) r3 = getpgid(0x0) (rerun: 64) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x400, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prlimit64(r3, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x68, 0x1, 0x0, 0x8, 0x0, 0x5, 0x92006, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x40112, 0x4000000005, 0x2, 0x2, 0x22ba, 0x0, 0x9, 0x0, 0x1, 0x0, 0x453}, r3, 0xe, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async, rerun: 32) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 00:29:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0xffffffffffffffff) 00:29:26 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0xffffffffffffffff) 00:29:26 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:27 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {0xffffffffffffffff, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000002eeffffaf66696c65f8"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x424b, 0x5, 0x401, 0xb, 0x5}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000001, 0x1ffe, 0x0, 0x1000, 0x81}, 0x0, 0xffffffffffffffff, r2, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, 0xffffffffffffffff) 00:29:27 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:27 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:27 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) 00:29:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:27 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:27 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:27 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) 00:29:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {r2, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 00:29:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000100)=0x774eea60) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x7) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:28 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x8) (async) 00:29:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:28 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410000, 0x20) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f00000000c0)) 00:29:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000100)=0x774eea60) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x7) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {r2, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) 00:29:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000100)=0x774eea60) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x7) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:29:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100)=0x774eea60) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:29 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410000, 0x20) (async) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f00000000c0)) 00:29:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100)=0x774eea60) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:29 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) 00:29:29 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100)=0x774eea60) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:30 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410000, 0x20) (async, rerun: 64) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f00000000c0)) (rerun: 64) 00:29:30 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100)=0x774eea60) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:29:30 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:30 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:31 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)={0x2, "c2b8"}, 0x3) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4800, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/207, 0xcf) rmdir(&(0x7f0000000040)='./file0\x00') rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '(@.['}, {0x20, '}%:'}, {0x20, '/dev/dlm-control\x00'}], 0xa, "47cc24be9c9826c46af677e2632fcd42d807f1f80dc1eb984ef033ccc736514e5e9bc11e19b806cfa1b680a153289d023820aa37b3f2ffe6278cce83de4ec3ff96a1f0d17d06f44b3ebfc9aaecab62c0ab049d54b078027b239b68e923121e478e3220d08555f9b2cb33c40d9649d4ef24279fa4d8eaa8e1b2aa19c81fd9532bec7dc8c0aa1e62af50f677883e0f78bc0a9e3607fc90c330e4a6d09adec5cdf142d11b5a0f65d4b85bcff546010be4bd1c9ca0c1aba66ff2ee8d94b1"}, 0xe2) 00:29:31 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x7, 0x10001, 0x80, 0x1, 0xffffffffffffffff, 0x7a387aeb}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4096}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0x404}, {0xffffffffffffffff, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:31 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:31 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:31 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)={0x2, "c2b8"}, 0x3) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4800, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/207, 0xcf) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '(@.['}, {0x20, '}%:'}, {0x20, '/dev/dlm-control\x00'}], 0xa, "47cc24be9c9826c46af677e2632fcd42d807f1f80dc1eb984ef033ccc736514e5e9bc11e19b806cfa1b680a153289d023820aa37b3f2ffe6278cce83de4ec3ff96a1f0d17d06f44b3ebfc9aaecab62c0ab049d54b078027b239b68e923121e478e3220d08555f9b2cb33c40d9649d4ef24279fa4d8eaa8e1b2aa19c81fd9532bec7dc8c0aa1e62af50f677883e0f78bc0a9e3607fc90c330e4a6d09adec5cdf142d11b5a0f65d4b85bcff546010be4bd1c9ca0c1aba66ff2ee8d94b1"}, 0xe2) 00:29:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:31 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:31 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:31 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)={0x2, "c2b8"}, 0x3) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4800, 0x0) read$snddsp(r2, &(0x7f00000000c0)=""/207, 0xcf) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '(@.['}, {0x20, '}%:'}, {0x20, '/dev/dlm-control\x00'}], 0xa, "47cc24be9c9826c46af677e2632fcd42d807f1f80dc1eb984ef033ccc736514e5e9bc11e19b806cfa1b680a153289d023820aa37b3f2ffe6278cce83de4ec3ff96a1f0d17d06f44b3ebfc9aaecab62c0ab049d54b078027b239b68e923121e478e3220d08555f9b2cb33c40d9649d4ef24279fa4d8eaa8e1b2aa19c81fd9532bec7dc8c0aa1e62af50f677883e0f78bc0a9e3607fc90c330e4a6d09adec5cdf142d11b5a0f65d4b85bcff546010be4bd1c9ca0c1aba66ff2ee8d94b1"}, 0xe2) 00:29:32 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x9, 0x7, 0x85, 0x0, 0x9, 0x8000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0xffffffffffff8000, 0x3}, 0x420, 0x80000000, 0x122, 0x1, 0x4, 0xfffff001, 0x17, 0x0, 0xb5, 0x0, 0x8000}, 0x0, 0xe, r0, 0x3) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) splice(r2, &(0x7f00000001c0)=0xbc, r1, &(0x7f0000000200)=0x5, 0x2, 0x0) 00:29:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:32 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:32 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000340)=""/136, 0x88}], 0x6}, 0x80}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/147, 0x93}], 0x3, &(0x7f0000000700)=""/238, 0xee}, 0x3}], 0x2, 0x40012102, &(0x7f00000008c0)={r0, r1+60000000}) 00:29:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:32 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:32 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000340)=""/136, 0x88}], 0x6}, 0x80}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/147, 0x93}], 0x3, &(0x7f0000000700)=""/238, 0xee}, 0x3}], 0x2, 0x40012102, &(0x7f00000008c0)={r0, r1+60000000}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) clock_gettime(0x0, &(0x7f0000000880)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000340)=""/136, 0x88}], 0x6}, 0x80}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/147, 0x93}], 0x3, &(0x7f0000000700)=""/238, 0xee}, 0x3}], 0x2, 0x40012102, &(0x7f00000008c0)={r0, r1+60000000}) (async) 00:29:32 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:32 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:33 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000340)=""/136, 0x88}], 0x6}, 0x80}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/147, 0x93}], 0x3, &(0x7f0000000700)=""/238, 0xee}, 0x3}], 0x2, 0x40012102, &(0x7f00000008c0)={r0, r1+60000000}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) clock_gettime(0x0, &(0x7f0000000880)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000340)=""/136, 0x88}], 0x6}, 0x80}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/147, 0x93}], 0x3, &(0x7f0000000700)=""/238, 0xee}, 0x3}], 0x2, 0x40012102, &(0x7f00000008c0)={r0, r1+60000000}) (async) 00:29:33 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:33 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:33 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:33 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7) 00:29:33 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:33 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:33 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x2]}, 0x0, &(0x7f0000000300), 0xffffffffffffff65) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x8, 0x2) 00:29:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 00:29:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000095c9003048f15d423f7f22ab57955fe6ccb2f0435e1107d468e58eceb60c403c5ab675db1d946d88ecef61ad674e3f233cbd52cffa514d3126aff49a1bcdf45ff31bfba91a772bfe35fd3c8151d335352d5ddb6b3f644f89558b7fc2d91206e2479fdd6768b5c9d8c4eeaac2fbbbd545c1519e8924364f47431d2ef7ab3bf746d2013d9b4e347aa0fbd03b7babc5783a4a891633d4cdb6ccc6238dd3a435aa3784f91d9085e099af369cb431df830deaae0e79c0c6f2b886cb65da16f06700000000000000001a000000369f62976ff257e52815c219bfc80f5b725cefab2b2bccaa165634f1927d25cc61bf92df8ea84edd6ea2086c450cabc12c134520bf696057d00c3232c71a838e2d77c02afcf361f024c2cada97188dd4e33612a858fb628af4d7084db21f477bfa22a5db1f86aeaebf0e7b3635645d97675b083fc17e8090542dc98e5ac42e28a2748e8a3e3a7dd46a1f0f6d8571750366a833bd57e43af08b287f902ec759863a51811550f8715fad755e1164b8091ca440c6b574446a0605f3c401507d28113f22826d828af81535cb7e692a75940302fe5b5f33b86755fb2779e737c4e3a3e11a5d71846c4b03a7c78822377c94359371377523ed0bb2656b456cec3ad0607bec4ace375e92610c1f2770f21abf26594cf3b87743d5160417a3960af11789d5d37544dd27bd64582dc2f6dcd82f040bd793631a9f8ad0bdda01193f266bd16b301e6948282d3eed28ff6fbf8d4f82b1c21f08cf025f8758ae35a0122a0bc8e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x404}, {r0, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:33 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:33 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:33 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x2]}, 0x0, &(0x7f0000000300), 0xffffffffffffff65) (async) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x8, 0x2) 00:29:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 00:29:33 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:33 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) 00:29:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)) 00:29:33 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x2]}, 0x0, &(0x7f0000000300), 0xffffffffffffff65) (async) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x8, 0x2) 00:29:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x404}, {r0, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:34 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x9]}, 0x0, &(0x7f0000000300), 0x8) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000000)) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x10001]}, &(0x7f0000000140), 0x8) r1 = getpid() ptrace$setsig(0x4203, r1, 0xfffffffffffffc00, &(0x7f0000000700)={0x31, 0x10000, 0x200}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x9, 0x1, 0x3}, &(0x7f0000000340)=[{}, {}, {}]) 00:29:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)) 00:29:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x9]}, 0x0, &(0x7f0000000300), 0x8) (async, rerun: 32) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) (rerun: 32) ioctl$LOOP_CLR_FD(r0, 0x4c01) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000000)) (async) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x10001]}, &(0x7f0000000140), 0x8) r1 = getpid() ptrace$setsig(0x4203, r1, 0xfffffffffffffc00, &(0x7f0000000700)={0x31, 0x10000, 0x200}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x9, 0x1, 0x3}, &(0x7f0000000340)=[{}, {}, {}]) 00:29:34 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x404}, {r0, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:34 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:34 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x9]}, 0x0, &(0x7f0000000300), 0x8) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000000)) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x10001]}, &(0x7f0000000140), 0x8) r1 = getpid() ptrace$setsig(0x4203, r1, 0xfffffffffffffc00, &(0x7f0000000700)={0x31, 0x10000, 0x200}) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x9, 0x1, 0x3}, &(0x7f0000000340)=[{}, {}, {}]) rt_sigtimedwait(&(0x7f0000000240)={[0x9]}, 0x0, &(0x7f0000000300), 0x8) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) (async) ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000000)) (async) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x10001]}, &(0x7f0000000140), 0x8) (async) getpid() (async) ptrace$setsig(0x4203, r1, 0xfffffffffffffc00, &(0x7f0000000700)={0x31, 0x10000, 0x200}) (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x9, 0x1, 0x3}, &(0x7f0000000340)=[{}, {}, {}]) (async) 00:29:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000095c9003048f15d423f7f22ab57955fe6ccb2f0435e1107d468e58eceb60c403c5ab675db1d946d88ecef61ad674e3f233cbd52cffa514d3126aff49a1bcdf45ff31bfba91a772bfe35fd3c8151d335352d5ddb6b3f644f89558b7fc2d91206e2479fdd6768b5c9d8c4eeaac2fbbbd545c1519e8924364f47431d2ef7ab3bf746d2013d9b4e347aa0fbd03b7babc5783a4a891633d4cdb6ccc6238dd3a435aa3784f91d9085e099af369cb431df830deaae0e79c0c6f2b886cb65da16f06700000000000000001a000000369f62976ff257e52815c219bfc80f5b725cefab2b2bccaa165634f1927d25cc61bf92df8ea84edd6ea2086c450cabc12c134520bf696057d00c3232c71a838e2d77c02afcf361f024c2cada97188dd4e33612a858fb628af4d7084db21f477bfa22a5db1f86aeaebf0e7b3635645d97675b083fc17e8090542dc98e5ac42e28a2748e8a3e3a7dd46a1f0f6d8571750366a833bd57e43af08b287f902ec759863a51811550f8715fad755e1164b8091ca440c6b574446a0605f3c401507d28113f22826d828af81535cb7e692a75940302fe5b5f33b86755fb2779e737c4e3a3e11a5d71846c4b03a7c78822377c94359371377523ed0bb2656b456cec3ad0607bec4ace375e92610c1f2770f21abf26594cf3b87743d5160417a3960af11789d5d37544dd27bd64582dc2f6dcd82f040bd793631a9f8ad0bdda01193f266bd16b301e6948282d3eed28ff6fbf8d4f82b1c21f08cf025f8758ae35a0122a0bc8e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:34 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0xff]}, &(0x7f0000000040), 0x8) 00:29:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0xff]}, &(0x7f0000000040), 0x8) 00:29:34 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:29:34 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:34 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) rt_sigprocmask(0x1, &(0x7f0000000000)={[0xff]}, &(0x7f0000000040), 0x8) 00:29:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:34 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:29:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:35 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x40]}, &(0x7f0000000040), 0x8) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/74, 0x4a}}], 0x6, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/228, 0xe4}], 0x2) 00:29:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x40]}, &(0x7f0000000040), 0x8) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, 0x0, 0x0) 00:29:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:35 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x40]}, &(0x7f0000000040), 0x8) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x40]}, &(0x7f0000000040), 0x8) (async) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, 0x0, 0x0) 00:29:35 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f0000000040)={r0, r1+10000000}, 0x8) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, 0x0, 0x0) 00:29:35 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1) 00:29:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1) 00:29:36 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) 00:29:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:36 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f0000000040)={r0, r1+10000000}, 0x8) 00:29:36 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:36 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}], 0x1) 00:29:36 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) 00:29:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:36 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) 00:29:36 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {0x0}], 0x2) 00:29:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:36 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/71, 0x47}}], 0x5, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:36 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:37 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f0000000040)={r0, r1+10000000}, 0x8) 00:29:37 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/126, 0x7e}, {0x0}], 0x2) 00:29:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)=""/218, 0xda}, 0x8}], 0x4, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:37 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:37 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 00:29:37 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}, {{&(0x7f0000001840)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000001dc0)=""/163, 0xa3}, 0x1000}], 0x3, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:37 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:38 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x3]}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) 00:29:38 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 00:29:38 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/250, 0xfa}], 0x1}, 0x2}], 0x2, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x3]}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) rt_sigtimedwait(&(0x7f0000000240)={[0x3]}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) (async) 00:29:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:38 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 00:29:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:38 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/168, 0xa8}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:38 executing program 0: rt_sigtimedwait(&(0x7f0000000240)={[0x3]}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8) 00:29:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:39 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xc3, "a46f3188e2066a1614b806d2c280d827c58422abf57b799c78fc478282fa9baacc7602a55b1c930e1fede151859f29148022bbc3f1f77401587918527938557a05a4e6df23a450dab17f234e515c48f1e88826d6068b975a0205e63436cca23fb40d0fb6972eaf904f14f99cd729d7a6cfd3256600d487451c1e4ad366f68a9385447b93b2d0130b132e8cf4696e0823860e36e35fe9cb6cc6ab0a48ff46e538431068933f5df602a4e2b06f8eb102d2cc40f7923793e3966aba13362ac5229909a247"}, &(0x7f0000000040)=0xe7) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) 00:29:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xc3, "a46f3188e2066a1614b806d2c280d827c58422abf57b799c78fc478282fa9baacc7602a55b1c930e1fede151859f29148022bbc3f1f77401587918527938557a05a4e6df23a450dab17f234e515c48f1e88826d6068b975a0205e63436cca23fb40d0fb6972eaf904f14f99cd729d7a6cfd3256600d487451c1e4ad366f68a9385447b93b2d0130b132e8cf4696e0823860e36e35fe9cb6cc6ab0a48ff46e538431068933f5df602a4e2b06f8eb102d2cc40f7923793e3966aba13362ac5229909a247"}, &(0x7f0000000040)=0xe7) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xc3, "a46f3188e2066a1614b806d2c280d827c58422abf57b799c78fc478282fa9baacc7602a55b1c930e1fede151859f29148022bbc3f1f77401587918527938557a05a4e6df23a450dab17f234e515c48f1e88826d6068b975a0205e63436cca23fb40d0fb6972eaf904f14f99cd729d7a6cfd3256600d487451c1e4ad366f68a9385447b93b2d0130b132e8cf4696e0823860e36e35fe9cb6cc6ab0a48ff46e538431068933f5df602a4e2b06f8eb102d2cc40f7923793e3966aba13362ac5229909a247"}, &(0x7f0000000040)=0xe7) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) 00:29:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 4: rt_sigtimedwait(&(0x7f0000000240)={[0x2]}, 0x0, &(0x7f0000000300), 0xffffffffffffff65) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x8, 0x2) 00:29:39 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:39 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={r2, r3+10000000}, 0x8) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000180)=[{0x1, 0x2, 0x1800}, {0x1, 0x0, 0x1000}], 0x2) semctl$IPC_RMID(r4, 0x0, 0x0) semop(r4, &(0x7f0000000200)=[{0x0, 0x4342}, {0x3, 0x4000, 0x1800}], 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f00000004c0)={&(0x7f0000000480)=""/15, 0xf}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') clock_gettime(0x5, &(0x7f0000005b40)) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) semtimedop(0x0, &(0x7f0000001600)=[{0x2, 0x3, 0x1000}, {0x3, 0x3ff, 0x1800}, {0x0, 0xff, 0x1800}, {0x4, 0x8, 0x800}], 0x4, &(0x7f0000003a40)) recvmmsg(r6, &(0x7f0000005880)=[{{&(0x7f0000000500)=@caif=@dgm, 0x80, &(0x7f0000003700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/170, 0xaa}], 0x6, &(0x7f0000003780)=""/211, 0xd3}, 0x400}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003900)=""/129, 0x81}, {&(0x7f00000039c0)=""/81, 0x51}, {&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/180, 0xb4}, {&(0x7f0000003b40)=""/238, 0xee}, {&(0x7f0000003c40)=""/78, 0x4e}, {&(0x7f0000003cc0)=""/223, 0xdf}, {&(0x7f0000003dc0)=""/253, 0xfd}], 0x8, &(0x7f0000003f40)=""/8, 0x8}, 0x9}, {{&(0x7f0000003f80)=@ax25={{0x3, @rose}, [@null, @default, @remote, @default, @bcast, @null, @remote, @bcast]}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/78, 0x4e}], 0x1, &(0x7f00000040c0)=""/116, 0x74}, 0x6}, {{&(0x7f0000004140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004580)=[{&(0x7f00000041c0)=""/199, 0xc7}, {&(0x7f00000042c0)=""/226, 0xe2}, {&(0x7f00000043c0)=""/218, 0xda}, {&(0x7f00000044c0)=""/123, 0x7b}, {&(0x7f0000004540)=""/38, 0x26}], 0x5, &(0x7f0000004600)=""/31, 0x1f}, 0x23e8}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004640)=""/123, 0x7b}], 0x1, &(0x7f0000004700)=""/149, 0x95}, 0x401}, {{&(0x7f00000047c0)=@ieee802154, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004840)=""/138, 0x8a}, {&(0x7f0000004900)=""/218, 0xda}, {&(0x7f0000004a00)=""/238, 0xee}], 0x3, &(0x7f0000004b40)=""/199, 0xc7}, 0xbe}, {{&(0x7f0000004c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/40, 0x28}, {&(0x7f0000004d00)=""/59, 0x3b}, {&(0x7f0000004d40)=""/35, 0x23}, {&(0x7f0000004d80)=""/138, 0x8a}], 0x4}, 0x1000}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004e80)=""/155, 0x9b}, {&(0x7f0000004f40)=""/169, 0xa9}, {&(0x7f0000005000)=""/237, 0xed}, {&(0x7f0000005100)=""/178, 0xb2}, {&(0x7f00000051c0)=""/230, 0xe6}, {&(0x7f00000052c0)=""/148, 0x94}, {&(0x7f0000005380)=""/75, 0x4b}], 0x7, &(0x7f0000005480)=""/140, 0x8c}, 0x5}, {{&(0x7f0000005540)=@un=@abs, 0x80, &(0x7f00000056c0)=[{&(0x7f00000055c0)=""/10, 0xa}, {&(0x7f0000005600)=""/157, 0x9d}], 0x2, &(0x7f0000005700)=""/2, 0x2}, 0x1f}, {{&(0x7f0000005740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/111, 0x6f}], 0x1}, 0x9}], 0xa, 0x12040, &(0x7f0000005b00)={0x77359400}) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x6, 0x1000}, {0x1, 0x7, 0x1800}, {0x0, 0x2, 0x1000}, {0x1, 0x1, 0x1000}, {0x4, 0xff2c, 0x800}, {0x1, 0xff}, {0x1, 0x0, 0x800}], 0x7, &(0x7f00000003c0)={0x77359400}) pselect6(0x40, &(0x7f0000000140)={0xe4, 0x8, 0x100000001, 0x3b4c8b50, 0x5, 0x2, 0x1000, 0x8001}, &(0x7f0000000180)={0x8, 0x20, 0x6, 0x4, 0x8, 0x3, 0x1, 0x14}, &(0x7f00000001c0)={0x6, 0x2, 0x8, 0x5, 0x3, 0x3, 0x20, 0x3}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffff]}, 0x8}) 00:29:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:39 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:39 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:40 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={r2, r3+10000000}, 0x8) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000180)=[{0x1, 0x2, 0x1800}, {0x1, 0x0, 0x1000}], 0x2) (async) semctl$IPC_RMID(r4, 0x0, 0x0) (async) semop(r4, &(0x7f0000000200)=[{0x0, 0x4342}, {0x3, 0x4000, 0x1800}], 0x2) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f00000004c0)={&(0x7f0000000480)=""/15, 0xf}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') clock_gettime(0x5, &(0x7f0000005b40)) (async) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) semtimedop(0x0, &(0x7f0000001600)=[{0x2, 0x3, 0x1000}, {0x3, 0x3ff, 0x1800}, {0x0, 0xff, 0x1800}, {0x4, 0x8, 0x800}], 0x4, &(0x7f0000003a40)) (async) recvmmsg(r6, &(0x7f0000005880)=[{{&(0x7f0000000500)=@caif=@dgm, 0x80, &(0x7f0000003700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/170, 0xaa}], 0x6, &(0x7f0000003780)=""/211, 0xd3}, 0x400}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003900)=""/129, 0x81}, {&(0x7f00000039c0)=""/81, 0x51}, {&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/180, 0xb4}, {&(0x7f0000003b40)=""/238, 0xee}, {&(0x7f0000003c40)=""/78, 0x4e}, {&(0x7f0000003cc0)=""/223, 0xdf}, {&(0x7f0000003dc0)=""/253, 0xfd}], 0x8, &(0x7f0000003f40)=""/8, 0x8}, 0x9}, {{&(0x7f0000003f80)=@ax25={{0x3, @rose}, [@null, @default, @remote, @default, @bcast, @null, @remote, @bcast]}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/78, 0x4e}], 0x1, &(0x7f00000040c0)=""/116, 0x74}, 0x6}, {{&(0x7f0000004140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004580)=[{&(0x7f00000041c0)=""/199, 0xc7}, {&(0x7f00000042c0)=""/226, 0xe2}, {&(0x7f00000043c0)=""/218, 0xda}, {&(0x7f00000044c0)=""/123, 0x7b}, {&(0x7f0000004540)=""/38, 0x26}], 0x5, &(0x7f0000004600)=""/31, 0x1f}, 0x23e8}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004640)=""/123, 0x7b}], 0x1, &(0x7f0000004700)=""/149, 0x95}, 0x401}, {{&(0x7f00000047c0)=@ieee802154, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004840)=""/138, 0x8a}, {&(0x7f0000004900)=""/218, 0xda}, {&(0x7f0000004a00)=""/238, 0xee}], 0x3, &(0x7f0000004b40)=""/199, 0xc7}, 0xbe}, {{&(0x7f0000004c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/40, 0x28}, {&(0x7f0000004d00)=""/59, 0x3b}, {&(0x7f0000004d40)=""/35, 0x23}, {&(0x7f0000004d80)=""/138, 0x8a}], 0x4}, 0x1000}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004e80)=""/155, 0x9b}, {&(0x7f0000004f40)=""/169, 0xa9}, {&(0x7f0000005000)=""/237, 0xed}, {&(0x7f0000005100)=""/178, 0xb2}, {&(0x7f00000051c0)=""/230, 0xe6}, {&(0x7f00000052c0)=""/148, 0x94}, {&(0x7f0000005380)=""/75, 0x4b}], 0x7, &(0x7f0000005480)=""/140, 0x8c}, 0x5}, {{&(0x7f0000005540)=@un=@abs, 0x80, &(0x7f00000056c0)=[{&(0x7f00000055c0)=""/10, 0xa}, {&(0x7f0000005600)=""/157, 0x9d}], 0x2, &(0x7f0000005700)=""/2, 0x2}, 0x1f}, {{&(0x7f0000005740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/111, 0x6f}], 0x1}, 0x9}], 0xa, 0x12040, &(0x7f0000005b00)={0x77359400}) (async) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x6, 0x1000}, {0x1, 0x7, 0x1800}, {0x0, 0x2, 0x1000}, {0x1, 0x1, 0x1000}, {0x4, 0xff2c, 0x800}, {0x1, 0xff}, {0x1, 0x0, 0x800}], 0x7, &(0x7f00000003c0)={0x77359400}) (async) pselect6(0x40, &(0x7f0000000140)={0xe4, 0x8, 0x100000001, 0x3b4c8b50, 0x5, 0x2, 0x1000, 0x8001}, &(0x7f0000000180)={0x8, 0x20, 0x6, 0x4, 0x8, 0x3, 0x1, 0x14}, &(0x7f00000001c0)={0x6, 0x2, 0x8, 0x5, 0x3, 0x3, 0x20, 0x3}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffff]}, 0x8}) 00:29:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:29:40 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={r2, r3+10000000}, 0x8) (async) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000180)=[{0x1, 0x2, 0x1800}, {0x1, 0x0, 0x1000}], 0x2) semctl$IPC_RMID(r4, 0x0, 0x0) (async) semop(r4, &(0x7f0000000200)=[{0x0, 0x4342}, {0x3, 0x4000, 0x1800}], 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f00000004c0)={&(0x7f0000000480)=""/15, 0xf}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') clock_gettime(0x5, &(0x7f0000005b40)) (async) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) semtimedop(0x0, &(0x7f0000001600)=[{0x2, 0x3, 0x1000}, {0x3, 0x3ff, 0x1800}, {0x0, 0xff, 0x1800}, {0x4, 0x8, 0x800}], 0x4, &(0x7f0000003a40)) (async) recvmmsg(r6, &(0x7f0000005880)=[{{&(0x7f0000000500)=@caif=@dgm, 0x80, &(0x7f0000003700)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/170, 0xaa}], 0x6, &(0x7f0000003780)=""/211, 0xd3}, 0x400}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003900)=""/129, 0x81}, {&(0x7f00000039c0)=""/81, 0x51}, {&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/180, 0xb4}, {&(0x7f0000003b40)=""/238, 0xee}, {&(0x7f0000003c40)=""/78, 0x4e}, {&(0x7f0000003cc0)=""/223, 0xdf}, {&(0x7f0000003dc0)=""/253, 0xfd}], 0x8, &(0x7f0000003f40)=""/8, 0x8}, 0x9}, {{&(0x7f0000003f80)=@ax25={{0x3, @rose}, [@null, @default, @remote, @default, @bcast, @null, @remote, @bcast]}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/78, 0x4e}], 0x1, &(0x7f00000040c0)=""/116, 0x74}, 0x6}, {{&(0x7f0000004140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004580)=[{&(0x7f00000041c0)=""/199, 0xc7}, {&(0x7f00000042c0)=""/226, 0xe2}, {&(0x7f00000043c0)=""/218, 0xda}, {&(0x7f00000044c0)=""/123, 0x7b}, {&(0x7f0000004540)=""/38, 0x26}], 0x5, &(0x7f0000004600)=""/31, 0x1f}, 0x23e8}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004640)=""/123, 0x7b}], 0x1, &(0x7f0000004700)=""/149, 0x95}, 0x401}, {{&(0x7f00000047c0)=@ieee802154, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004840)=""/138, 0x8a}, {&(0x7f0000004900)=""/218, 0xda}, {&(0x7f0000004a00)=""/238, 0xee}], 0x3, &(0x7f0000004b40)=""/199, 0xc7}, 0xbe}, {{&(0x7f0000004c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/40, 0x28}, {&(0x7f0000004d00)=""/59, 0x3b}, {&(0x7f0000004d40)=""/35, 0x23}, {&(0x7f0000004d80)=""/138, 0x8a}], 0x4}, 0x1000}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000004e80)=""/155, 0x9b}, {&(0x7f0000004f40)=""/169, 0xa9}, {&(0x7f0000005000)=""/237, 0xed}, {&(0x7f0000005100)=""/178, 0xb2}, {&(0x7f00000051c0)=""/230, 0xe6}, {&(0x7f00000052c0)=""/148, 0x94}, {&(0x7f0000005380)=""/75, 0x4b}], 0x7, &(0x7f0000005480)=""/140, 0x8c}, 0x5}, {{&(0x7f0000005540)=@un=@abs, 0x80, &(0x7f00000056c0)=[{&(0x7f00000055c0)=""/10, 0xa}, {&(0x7f0000005600)=""/157, 0x9d}], 0x2, &(0x7f0000005700)=""/2, 0x2}, 0x1f}, {{&(0x7f0000005740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/111, 0x6f}], 0x1}, 0x9}], 0xa, 0x12040, &(0x7f0000005b00)={0x77359400}) (async) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x6, 0x1000}, {0x1, 0x7, 0x1800}, {0x0, 0x2, 0x1000}, {0x1, 0x1, 0x1000}, {0x4, 0xff2c, 0x800}, {0x1, 0xff}, {0x1, 0x0, 0x800}], 0x7, &(0x7f00000003c0)={0x77359400}) pselect6(0x40, &(0x7f0000000140)={0xe4, 0x8, 0x100000001, 0x3b4c8b50, 0x5, 0x2, 0x1000, 0x8001}, &(0x7f0000000180)={0x8, 0x20, 0x6, 0x4, 0x8, 0x3, 0x1, 0x14}, &(0x7f00000001c0)={0x6, 0x2, 0x8, 0x5, 0x3, 0x3, 0x20, 0x3}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffff]}, 0x8}) 00:29:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:29:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r0, 0xd8fad000) 00:29:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r0, 0xd8fad000) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r0, 0xd8fad000) (async) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)) 00:29:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) 00:29:41 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r0, 0xd8fad000) 00:29:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x80000000, 0x4, 0x0, 0x4, 0x80, 0x3ff, 0x2}, &(0x7f0000000100)={0x4, 0xb0b, 0x101, 0x87b, 0x1b, 0x5a4, 0x80000001, 0x5}, &(0x7f0000000140)={0x56, 0x9, 0x8622, 0x2, 0x3f, 0xd2d, 0x40}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:42 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x80000000, 0x4, 0x0, 0x4, 0x80, 0x3ff, 0x2}, &(0x7f0000000100)={0x4, 0xb0b, 0x101, 0x87b, 0x1b, 0x5a4, 0x80000001, 0x5}, &(0x7f0000000140)={0x56, 0x9, 0x8622, 0x2, 0x3f, 0xd2d, 0x40}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 00:29:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) 00:29:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) 00:29:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:43 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x80000000, 0x4, 0x0, 0x4, 0x80, 0x3ff, 0x2}, &(0x7f0000000100)={0x4, 0xb0b, 0x101, 0x87b, 0x1b, 0x5a4, 0x80000001, 0x5}, &(0x7f0000000140)={0x56, 0x9, 0x8622, 0x2, 0x3f, 0xd2d, 0x40}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={r0, r1+60000000}, 0x8) (async) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x80000000, 0x4, 0x0, 0x4, 0x80, 0x3ff, 0x2}, &(0x7f0000000100)={0x4, 0xb0b, 0x101, 0x87b, 0x1b, 0x5a4, 0x80000001, 0x5}, &(0x7f0000000140)={0x56, 0x9, 0x8622, 0x2, 0x3f, 0xd2d, 0x40}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) (async) 00:29:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:43 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:43 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:44 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x272400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) openat(r0, &(0x7f0000000080)='./file0\x00', 0x602, 0x1) 00:29:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000095c9003048f15d423f7f22ab57955fe6ccb2f0435e1107d468e58eceb60c403c5ab675db1d946d88ecef61ad674e3f233cbd52cffa514d3126aff49a1bcdf45ff31bfba91a772bfe35fd3c8151d335352d5ddb6b3f644f89558b7fc2d91206e2479fdd6768b5c9d8c4eeaac2fbbbd545c1519e8924364f47431d2ef7ab3bf746d2013d9b4e347aa0fbd03b7babc5783a4a891633d4cdb6ccc6238dd3a435aa3784f91d9085e099af369cb431df830deaae0e79c0c6f2b886cb65da16f06700000000000000001a000000369f62976ff257e52815c219bfc80f5b725cefab2b2bccaa165634f1927d25cc61bf92df8ea84edd6ea2086c450cabc12c134520bf696057d00c3232c71a838e2d77c02afcf361f024c2cada97188dd4e33612a858fb628af4d7084db21f477bfa22a5db1f86aeaebf0e7b3635645d97675b083fc17e8090542dc98e5ac42e28a2748e8a3e3a7dd46a1f0f6d8571750366a833bd57e43af08b287f902ec759863a51811550f8715fad755e1164b8091ca440c6b574446a0605f3c401507d28113f22826d828af81535cb7e692a75940302fe5b5f33b86755fb2779e737c4e3a3e11a5d71846c4b03a7c78822377c94359371377523ed0bb2656b456cec3ad0607bec4ace375e92610c1f2770f21abf26594cf3b87743d5160417a3960af11789d5d37544dd27bd64582dc2f6dcd82f040bd793631a9f8ad0bdda01193f266bd16b301e6948282d3eed28ff6fbf8d4f82b1c21f08cf025f8758ae35a0122a0bc8e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:44 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:44 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x272400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) openat(r0, &(0x7f0000000080)='./file0\x00', 0x602, 0x1) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x272400, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) openat(r0, &(0x7f0000000080)='./file0\x00', 0x602, 0x1) (async) 00:29:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:44 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:44 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x272400, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) openat(r0, &(0x7f0000000080)='./file0\x00', 0x602, 0x1) 00:29:44 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 00:29:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x80, 0x0, 0x20, 0x0, 0xfffffffffffffffc, 0x6600, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x401, 0x7, 0x8, 0x5, 0x4, 0x0, 0x0, 0xa5, 0x0, 0x1}, r1, 0x8, r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010102, @private=0xa010101, 0x0, "bfe819061c68894439f0aaf9d309339850ac4f6bce99d64fd5ad86f0636bc358", 0x8dc, 0x4, 0x6, 0xfffffbea}, 0x3c) 00:29:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:45 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) 00:29:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x80, 0x0, 0x20, 0x0, 0xfffffffffffffffc, 0x6600, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x401, 0x7, 0x8, 0x5, 0x4, 0x0, 0x0, 0xa5, 0x0, 0x1}, r1, 0x8, r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010102, @private=0xa010101, 0x0, "bfe819061c68894439f0aaf9d309339850ac4f6bce99d64fd5ad86f0636bc358", 0x8dc, 0x4, 0x6, 0xfffffbea}, 0x3c) 00:29:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:45 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x80, 0x0, 0x20, 0x0, 0xfffffffffffffffc, 0x6600, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x800, 0x401, 0x7, 0x8, 0x5, 0x4, 0x0, 0x0, 0xa5, 0x0, 0x1}, r1, 0x8, r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010102, @private=0xa010101, 0x0, "bfe819061c68894439f0aaf9d309339850ac4f6bce99d64fd5ad86f0636bc358", 0x8dc, 0x4, 0x6, 0xfffffbea}, 0x3c) 00:29:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) 00:29:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:45 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="180000000095c9003048f15d423f7f22ab57955fe6ccb2f0435e1107d468e58eceb60c403c5ab675db1d946d88ecef61ad674e3f233cbd52cffa514d3126aff49a1bcdf45ff31bfba91a772bfe35fd3c8151d335352d5ddb6b3f644f89558b7fc2d91206e2479fdd6768b5c9d8c4eeaac2fbbbd545c1519e8924364f47431d2ef7ab3bf746d2013d9b4e347aa0fbd03b7babc5783a4a891633d4cdb6ccc6238dd3a435aa3784f91d9085e099af369cb431df830deaae0e79c0c6f2b886cb65da16f06700000000000000001a000000369f62976ff257e52815c219bfc80f5b725cefab2b2bccaa165634f1927d25cc61bf92df8ea84edd6ea2086c450cabc12c134520bf696057d00c3232c71a838e2d77c02afcf361f024c2cada97188dd4e33612a858fb628af4d7084db21f477bfa22a5db1f86aeaebf0e7b3635645d97675b083fc17e8090542dc98e5ac42e28a2748e8a3e3a7dd46a1f0f6d8571750366a833bd57e43af08b287f902ec759863a51811550f8715fad755e1164b8091ca440c6b574446a0605f3c401507d28113f22826d828af81535cb7e692a75940302fe5b5f33b86755fb2779e737c4e3a3e11a5d71846c4b03a7c78822377c94359371377523ed0bb2656b456cec3ad0607bec4ace375e92610c1f2770f21abf26594cf3b87743d5160417a3960af11789d5d37544dd27bd64582dc2f6dcd82f040bd793631a9f8ad0bdda01193f266bd16b301e6948282d3eed28ff6fbf8d4f82b1c21f08cf025f8758ae35a0122a0bc8e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:46 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) (async) 00:29:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:46 executing program 0: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+60000000}, 0x8) (async) 00:29:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)) 00:29:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:29:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)) 00:29:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:29:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x41) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') 00:29:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:29:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x80}, {0xffffffffffffffff, 0x404}, {r1, 0x4028}, {0xffffffffffffffff, 0xa08a}, {0xffffffffffffffff, 0x200}, {}], 0x6, 0x41) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 00:29:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:29:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:29:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:29:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:29:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:49 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 2: syslog(0x3, &(0x7f0000000000)=""/113, 0x71) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300), 0x8) 00:29:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) 00:29:49 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffff4bc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="51030000000000002e2f66696c653000"]) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme_core', 0x2f0082, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], 0x16) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getpeername$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, &(0x7f0000000380)=0x6e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4e}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x4, 0x7f, 0xfe, 0x0, 0x0, 0xffffffffffffe764, 0x10222, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xe}, 0x200, 0x7990, 0x9, 0x4, 0x2, 0x101, 0xfff9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r9, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r8, 0x1, 0x2, 0x3f}, 0x10) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:29:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) close(r1) 00:29:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:49 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) (fail_nth: 1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 682.054146] FAULT_INJECTION: forcing a failure. [ 682.054146] name failslab, interval 1, probability 0, space 0, times 0 [ 682.082300] CPU: 0 PID: 2157 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 682.090126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 682.099486] Call Trace: [ 682.102095] dump_stack+0x1fc/0x2ef [ 682.105747] should_fail.cold+0xa/0xf [ 682.109569] ? setup_fault_attr+0x200/0x200 [ 682.113903] ? lock_acquire+0x170/0x3c0 [ 682.117900] __should_failslab+0x115/0x180 [ 682.122156] should_failslab+0x5/0x10 [ 682.125966] __kmalloc+0x2ab/0x3c0 [ 682.129517] ? rw_copy_check_uvector+0x2ca/0x340 [ 682.134294] rw_copy_check_uvector+0x2ca/0x340 [ 682.138891] ? perf_trace_lock+0xe2/0x4b0 [ 682.143055] import_iovec+0xa6/0x3a0 [ 682.146780] ? dup_iter+0x250/0x250 [ 682.150418] ? perf_trace_lock_acquire+0x530/0x530 [ 682.155355] ? perf_trace_lock+0xe2/0x4b0 [ 682.159514] vfs_readv+0xbb/0x150 [ 682.162983] ? compat_rw_copy_check_uvector+0x410/0x410 [ 682.168359] ? lock_downgrade+0x720/0x720 [ 682.172517] ? check_preemption_disabled+0x41/0x280 [ 682.177541] ? __fget+0x356/0x510 [ 682.181002] ? do_dup2+0x450/0x450 [ 682.184569] __x64_sys_preadv+0x22b/0x310 [ 682.188724] ? __ia32_sys_writev+0xb0/0xb0 [ 682.192972] ? trace_hardirqs_off_caller+0x6e/0x210 [ 682.197996] ? do_syscall_64+0x21/0x620 00:29:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 682.201976] do_syscall_64+0xf9/0x620 [ 682.205790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.210983] RIP: 0033:0x7f18e79455a9 [ 682.214702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 682.233610] RSP: 002b:00007f18e5eb8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 682.241332] RAX: ffffffffffffffda RBX: 00007f18e7a65f80 RCX: 00007f18e79455a9 00:29:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) [ 682.248608] RDX: 00000000000001a3 RSI: 00000000200017c0 RDI: 0000000000000003 [ 682.255886] RBP: 00007f18e5eb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.263169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.270448] R13: 00007ffdeebc291f R14: 00007f18e5eb8300 R15: 0000000000022000 00:29:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (fail_nth: 1) 00:29:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 682.791665] FAULT_INJECTION: forcing a failure. [ 682.791665] name failslab, interval 1, probability 0, space 0, times 0 [ 682.813957] CPU: 1 PID: 2191 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 682.821786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 682.831148] Call Trace: [ 682.833751] dump_stack+0x1fc/0x2ef [ 682.837396] should_fail.cold+0xa/0xf [ 682.841220] ? setup_fault_attr+0x200/0x200 [ 682.845559] ? lock_acquire+0x170/0x3c0 [ 682.849551] __should_failslab+0x115/0x180 [ 682.853800] should_failslab+0x5/0x10 [ 682.857620] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 682.862740] __kmalloc_node+0x38/0x70 [ 682.866554] kvmalloc_node+0x61/0xf0 [ 682.870274] seq_read+0x85c/0x11c0 [ 682.873824] ? __sanitizer_cov_trace_pc+0x22/0x50 [ 682.878693] ? security_file_permission+0x1c0/0x220 [ 682.883736] do_iter_read+0x471/0x630 [ 682.887567] vfs_readv+0xe5/0x150 [ 682.891034] ? compat_rw_copy_check_uvector+0x410/0x410 [ 682.896406] ? lock_downgrade+0x720/0x720 [ 682.900575] ? __fget+0x356/0x510 [ 682.904046] ? do_dup2+0x450/0x450 [ 682.907626] __x64_sys_preadv+0x22b/0x310 [ 682.911793] ? __ia32_sys_writev+0xb0/0xb0 [ 682.916042] ? trace_hardirqs_off_caller+0x6e/0x210 [ 682.921071] ? do_syscall_64+0x21/0x620 [ 682.925061] do_syscall_64+0xf9/0x620 [ 682.928895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.934096] RIP: 0033:0x7f18e79455a9 [ 682.937818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 682.956727] RSP: 002b:00007f18e5eb8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 682.964444] RAX: ffffffffffffffda RBX: 00007f18e7a65f80 RCX: 00007f18e79455a9 [ 682.971725] RDX: 00000000000001a3 RSI: 00000000200017c0 RDI: 0000000000000003 [ 682.979027] RBP: 00007f18e5eb81d0 R08: 0000000000000000 R09: 0000000000000000 00:29:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) [ 682.986301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.993577] R13: 00007ffdeebc291f R14: 00007f18e5eb8300 R15: 0000000000022000 00:29:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000000c0)={r3}) 00:29:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) (fail_nth: 3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000000c0)={r3}) 00:29:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000000c0)={r3}) 00:29:51 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:51 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000000c0)={r3}) 00:29:51 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:52 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (fail_nth: 1) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x2, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5421, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5450, &(0x7f00000000c0)={r3}) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000000c0)={r3}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:29:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5451, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5452, &(0x7f00000000c0)={r3}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (fail_nth: 1) 00:29:52 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000000c0)={r3}) 00:29:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e}) 00:29:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x5460, &(0x7f00000000c0)={r3}) 00:29:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x2}) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, &(0x7f0000000080)) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x40049409, &(0x7f00000000c0)={r3}) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x2}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940), 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x2}) (async) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, &(0x7f0000000080)) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0x4020940d, &(0x7f00000000c0)={r3}) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, &(0x7f0000000080)) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e}) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940), 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000080)={0x2}) (rerun: 32) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0045878, &(0x7f00000000c0)={r3}) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x0, 0x7e}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, &(0x7f0000000080)) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464c9, &(0x7f00000000c0)={r3}) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xde, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, &(0x7f0000000080)) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f}) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc0189436, &(0x7f00000000c0)={r3}) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xde, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, &(0x7f0000000080)) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xde, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xde, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc020660b, &(0x7f00000000c0)={r3}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, &(0x7f0000000080)) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, &(0x7f0000000080)) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x660900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x7b70c0f4cb3c3ab, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (fail_nth: 1) 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, &(0x7f0000000080)) 00:29:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x660900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x7b70c0f4cb3c3ab, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 685.642169] FAULT_INJECTION: forcing a failure. [ 685.642169] name failslab, interval 1, probability 0, space 0, times 0 [ 685.711779] CPU: 0 PID: 2532 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 685.719614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 685.728977] Call Trace: [ 685.731582] dump_stack+0x1fc/0x2ef [ 685.735227] should_fail.cold+0xa/0xf [ 685.739047] ? setup_fault_attr+0x200/0x200 [ 685.743383] ? lock_acquire+0x170/0x3c0 [ 685.747375] __should_failslab+0x115/0x180 [ 685.751623] should_failslab+0x5/0x10 [ 685.755445] kmem_cache_alloc_trace+0x284/0x380 [ 685.760132] __vgem_gem_create+0x44/0xf0 [ 685.764204] vgem_gem_dumb_create+0xcf/0x240 [ 685.768623] drm_mode_create_dumb+0x27c/0x300 [ 685.773131] drm_ioctl_kernel+0x208/0x2a0 [ 685.777285] ? drm_mode_create_dumb+0x300/0x300 [ 685.781968] ? drm_ioctl_permit+0x210/0x210 [ 685.786298] ? __might_fault+0x192/0x1d0 [ 685.790378] drm_ioctl+0x5a0/0x9e0 [ 685.793954] ? drm_mode_create_dumb+0x300/0x300 [ 685.798639] ? drm_getstats+0x20/0x20 [ 685.802451] ? perf_trace_lock_acquire+0x530/0x530 [ 685.807401] ? perf_trace_lock_acquire+0x530/0x530 [ 685.812343] ? perf_trace_lock+0xe2/0x4b0 [ 685.816514] ? drm_getstats+0x20/0x20 [ 685.820330] do_vfs_ioctl+0xcdb/0x12e0 [ 685.824328] ? lock_downgrade+0x720/0x720 [ 685.828488] ? check_preemption_disabled+0x41/0x280 [ 685.833521] ? ioctl_preallocate+0x200/0x200 [ 685.837953] ? __fget+0x356/0x510 [ 685.841422] ? do_dup2+0x450/0x450 [ 685.844974] ? vfs_write+0x393/0x540 [ 685.848702] ? fput+0x2b/0x190 [ 685.851912] ksys_ioctl+0x9b/0xc0 [ 685.855380] __x64_sys_ioctl+0x6f/0xb0 00:29:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (rerun: 64) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 685.859280] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 685.863868] do_syscall_64+0xf9/0x620 [ 685.867689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.872894] RIP: 0033:0x7f8c9c1ff5a9 [ 685.876615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 685.895521] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.903245] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, &(0x7f0000000080)) 00:29:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x6, 0x660900) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x7b70c0f4cb3c3ab, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 685.910531] RDX: 0000000020000200 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 685.917813] RBP: 00007f8c9a7721d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.925095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.932375] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 00:29:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (fail_nth: 2) 00:29:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xb, 0x8, 0x72e9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xceb8, 0x6, 0x9, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c64c9, &(0x7f0000000080)) 00:29:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (rerun: 64) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xb, 0x8, 0x72e9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xceb8, 0x6, 0x9, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000140)={r9}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) [ 686.047896] FAULT_INJECTION: forcing a failure. [ 686.047896] name failslab, interval 1, probability 0, space 0, times 0 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 686.112368] CPU: 0 PID: 2567 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 686.120209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 686.129659] Call Trace: [ 686.132259] dump_stack+0x1fc/0x2ef [ 686.135912] should_fail.cold+0xa/0xf [ 686.139820] ? setup_fault_attr+0x200/0x200 [ 686.144159] ? lock_acquire+0x170/0x3c0 [ 686.148167] __should_failslab+0x115/0x180 [ 686.152418] should_failslab+0x5/0x10 [ 686.156225] kmem_cache_alloc+0x277/0x370 [ 686.160387] ? shmem_destroy_callback+0xb0/0xb0 [ 686.165071] shmem_alloc_inode+0x18/0x40 [ 686.169147] ? shmem_destroy_callback+0xb0/0xb0 [ 686.173835] alloc_inode+0x5d/0x180 [ 686.177473] new_inode+0x1d/0xf0 [ 686.180858] shmem_get_inode+0x96/0x8d0 [ 686.184843] ? setup_fault_attr+0x200/0x200 [ 686.189188] __shmem_file_setup.part.0+0x7a/0x2b0 [ 686.194050] shmem_file_setup+0x61/0x90 [ 686.198039] drm_gem_object_init+0x36/0xb0 [ 686.202288] __vgem_gem_create+0x6e/0xf0 [ 686.206365] vgem_gem_dumb_create+0xcf/0x240 [ 686.210796] drm_mode_create_dumb+0x27c/0x300 [ 686.215313] drm_ioctl_kernel+0x208/0x2a0 [ 686.219476] ? drm_mode_create_dumb+0x300/0x300 [ 686.224167] ? drm_ioctl_permit+0x210/0x210 [ 686.228501] ? __might_fault+0x192/0x1d0 [ 686.232599] drm_ioctl+0x5a0/0x9e0 [ 686.236159] ? drm_mode_create_dumb+0x300/0x300 [ 686.240842] ? drm_getstats+0x20/0x20 [ 686.244656] ? perf_trace_lock_acquire+0x530/0x530 [ 686.249611] ? perf_trace_lock_acquire+0x530/0x530 [ 686.254555] ? perf_trace_lock+0xe2/0x4b0 [ 686.258730] ? drm_getstats+0x20/0x20 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 686.262543] do_vfs_ioctl+0xcdb/0x12e0 [ 686.266444] ? lock_downgrade+0x720/0x720 [ 686.270601] ? check_preemption_disabled+0x41/0x280 [ 686.275625] ? ioctl_preallocate+0x200/0x200 [ 686.280046] ? __fget+0x356/0x510 [ 686.283515] ? do_dup2+0x450/0x450 [ 686.287063] ? vfs_write+0x393/0x540 [ 686.290786] ? fput+0x2b/0x190 [ 686.293996] ksys_ioctl+0x9b/0xc0 [ 686.297461] __x64_sys_ioctl+0x6f/0xb0 [ 686.301359] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 686.305950] do_syscall_64+0xf9/0x620 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, &(0x7f0000000080)) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 686.309789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 686.314987] RIP: 0033:0x7f8c9c1ff5a9 [ 686.318704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 686.337615] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.345334] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 686.352612] RDX: 0000000020000200 RSI: 00000000c02064b2 RDI: 0000000000000003 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 686.359893] RBP: 00007f8c9a7721d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.367168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.374446] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 00:29:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (fail_nth: 3) 00:29:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xb, 0x8, 0x72e9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xceb8, 0x6, 0x9, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xb, 0x8, 0x72e9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xceb8, 0x6, 0x9}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000140)={r9}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, &(0x7f0000000080)) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 686.472790] FAULT_INJECTION: forcing a failure. [ 686.472790] name failslab, interval 1, probability 0, space 0, times 0 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) [ 686.520953] CPU: 0 PID: 2604 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 686.528785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 686.538150] Call Trace: [ 686.540759] dump_stack+0x1fc/0x2ef [ 686.544494] should_fail.cold+0xa/0xf [ 686.548324] ? setup_fault_attr+0x200/0x200 [ 686.552970] ? lock_acquire+0x170/0x3c0 [ 686.556972] __should_failslab+0x115/0x180 [ 686.561217] should_failslab+0x5/0x10 [ 686.565029] kmem_cache_alloc+0x277/0x370 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 686.569191] __d_alloc+0x2b/0xa10 [ 686.572664] d_alloc_pseudo+0x19/0x70 [ 686.576477] alloc_file_pseudo+0xc6/0x250 [ 686.580640] ? alloc_file+0x4d0/0x4d0 [ 686.584453] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 686.590095] ? shmem_get_inode+0x44c/0x8d0 [ 686.594345] __shmem_file_setup.part.0+0x102/0x2b0 [ 686.599291] shmem_file_setup+0x61/0x90 [ 686.603275] drm_gem_object_init+0x36/0xb0 [ 686.607525] __vgem_gem_create+0x6e/0xf0 [ 686.611599] vgem_gem_dumb_create+0xcf/0x240 [ 686.616029] drm_mode_create_dumb+0x27c/0x300 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x2}) [ 686.620544] drm_ioctl_kernel+0x208/0x2a0 [ 686.624712] ? drm_mode_create_dumb+0x300/0x300 [ 686.629395] ? drm_ioctl_permit+0x210/0x210 [ 686.633744] ? __might_fault+0x192/0x1d0 [ 686.637827] drm_ioctl+0x5a0/0x9e0 [ 686.641384] ? drm_mode_create_dumb+0x300/0x300 [ 686.646064] ? drm_getstats+0x20/0x20 [ 686.649884] ? perf_trace_lock_acquire+0x530/0x530 [ 686.654832] ? perf_trace_lock_acquire+0x530/0x530 [ 686.659779] ? perf_trace_lock+0xe2/0x4b0 [ 686.663942] ? drm_getstats+0x20/0x20 [ 686.667754] do_vfs_ioctl+0xcdb/0x12e0 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 686.671665] ? lock_downgrade+0x720/0x720 [ 686.675827] ? check_preemption_disabled+0x41/0x280 [ 686.680858] ? ioctl_preallocate+0x200/0x200 [ 686.685289] ? __fget+0x356/0x510 [ 686.688757] ? do_dup2+0x450/0x450 [ 686.692310] ? vfs_write+0x393/0x540 [ 686.696036] ? fput+0x2b/0x190 [ 686.699255] ksys_ioctl+0x9b/0xc0 [ 686.702725] __x64_sys_ioctl+0x6f/0xb0 [ 686.706624] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 686.711223] do_syscall_64+0xf9/0x620 [ 686.715048] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x2000000}) [ 686.720253] RIP: 0033:0x7f8c9c1ff5a9 [ 686.723976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 686.742887] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.750714] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 686.757999] RDX: 0000000020000200 RSI: 00000000c02064b2 RDI: 0000000000000003 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 686.765281] RBP: 00007f8c9a7721d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.772576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.779860] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 00:29:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (fail_nth: 4) 00:29:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3f, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x442e02, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) 00:29:54 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3f, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3f, 0x7, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:29:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x442e02, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) [ 686.952130] FAULT_INJECTION: forcing a failure. [ 686.952130] name failslab, interval 1, probability 0, space 0, times 0 00:29:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3f, 0x7, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 687.017291] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.022937] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.038163] CPU: 1 PID: 2660 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 687.045993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 687.055789] Call Trace: [ 687.058391] dump_stack+0x1fc/0x2ef [ 687.062033] should_fail.cold+0xa/0xf [ 687.065853] ? setup_fault_attr+0x200/0x200 [ 687.070183] ? lock_acquire+0x170/0x3c0 [ 687.074174] __should_failslab+0x115/0x180 [ 687.078422] should_failslab+0x5/0x10 [ 687.082233] kmem_cache_alloc+0x277/0x370 [ 687.086395] __alloc_file+0x21/0x340 [ 687.090126] alloc_empty_file+0x6d/0x170 [ 687.094201] alloc_file+0x5e/0x4d0 [ 687.097757] alloc_file_pseudo+0x165/0x250 [ 687.102008] ? alloc_file+0x4d0/0x4d0 [ 687.105820] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 687.111462] ? shmem_get_inode+0x44c/0x8d0 [ 687.115721] __shmem_file_setup.part.0+0x102/0x2b0 [ 687.120680] shmem_file_setup+0x61/0x90 [ 687.124666] drm_gem_object_init+0x36/0xb0 [ 687.128916] __vgem_gem_create+0x6e/0xf0 [ 687.132992] vgem_gem_dumb_create+0xcf/0x240 [ 687.137422] drm_mode_create_dumb+0x27c/0x300 [ 687.141937] drm_ioctl_kernel+0x208/0x2a0 [ 687.146100] ? drm_mode_create_dumb+0x300/0x300 [ 687.150779] ? drm_ioctl_permit+0x210/0x210 [ 687.155113] ? __might_fault+0x192/0x1d0 [ 687.159186] drm_ioctl+0x5a0/0x9e0 [ 687.162741] ? drm_mode_create_dumb+0x300/0x300 [ 687.167421] ? drm_getstats+0x20/0x20 [ 687.171231] ? perf_trace_lock_acquire+0x530/0x530 [ 687.176176] ? perf_trace_lock_acquire+0x530/0x530 [ 687.181110] ? perf_trace_lock+0xe2/0x4b0 [ 687.185274] ? drm_getstats+0x20/0x20 [ 687.189081] do_vfs_ioctl+0xcdb/0x12e0 [ 687.192988] ? lock_downgrade+0x720/0x720 [ 687.197146] ? check_preemption_disabled+0x41/0x280 [ 687.202171] ? ioctl_preallocate+0x200/0x200 [ 687.206592] ? __fget+0x356/0x510 [ 687.210061] ? do_dup2+0x450/0x450 [ 687.213607] ? vfs_write+0x393/0x540 [ 687.217328] ? fput+0x2b/0x190 [ 687.220531] ksys_ioctl+0x9b/0xc0 [ 687.223994] __x64_sys_ioctl+0x6f/0xb0 [ 687.227894] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 687.232485] do_syscall_64+0xf9/0x620 [ 687.236314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 687.241507] RIP: 0033:0x7f8c9c1ff5a9 [ 687.245225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 687.264307] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.272042] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 687.279320] RDX: 0000000020000200 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 687.286596] RBP: 00007f8c9a7721d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.293875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.301159] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 00:29:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x442e02, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) 00:29:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (fail_nth: 5) 00:29:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 687.793324] FAULT_INJECTION: forcing a failure. [ 687.793324] name failslab, interval 1, probability 0, space 0, times 0 00:29:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) close(0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) (async) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) 00:29:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 687.867434] CPU: 1 PID: 2704 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 687.875269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 687.884634] Call Trace: [ 687.887232] dump_stack+0x1fc/0x2ef [ 687.890878] should_fail.cold+0xa/0xf [ 687.894692] ? setup_fault_attr+0x200/0x200 [ 687.899026] ? lock_acquire+0x170/0x3c0 [ 687.903022] __should_failslab+0x115/0x180 [ 687.907288] should_failslab+0x5/0x10 [ 687.911102] kmem_cache_alloc_trace+0x284/0x380 [ 687.915788] apparmor_file_alloc_security+0x394/0xad0 [ 687.920987] ? apparmor_file_receive+0x160/0x160 [ 687.925753] ? __alloc_file+0x21/0x340 [ 687.929662] security_file_alloc+0x40/0x90 [ 687.933912] __alloc_file+0xd8/0x340 [ 687.937639] alloc_empty_file+0x6d/0x170 [ 687.941713] alloc_file+0x5e/0x4d0 [ 687.945265] alloc_file_pseudo+0x165/0x250 [ 687.949513] ? alloc_file+0x4d0/0x4d0 [ 687.953319] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 687.958956] ? shmem_get_inode+0x44c/0x8d0 [ 687.963209] __shmem_file_setup.part.0+0x102/0x2b0 [ 687.968154] shmem_file_setup+0x61/0x90 [ 687.972140] drm_gem_object_init+0x36/0xb0 [ 687.976388] __vgem_gem_create+0x6e/0xf0 [ 687.980461] vgem_gem_dumb_create+0xcf/0x240 [ 687.984891] drm_mode_create_dumb+0x27c/0x300 [ 687.989407] drm_ioctl_kernel+0x208/0x2a0 [ 687.993567] ? drm_mode_create_dumb+0x300/0x300 [ 687.998247] ? drm_ioctl_permit+0x210/0x210 [ 688.002582] ? __might_fault+0x192/0x1d0 [ 688.006673] drm_ioctl+0x5a0/0x9e0 [ 688.010233] ? drm_mode_create_dumb+0x300/0x300 [ 688.014910] ? drm_getstats+0x20/0x20 [ 688.018720] ? perf_trace_lock_acquire+0x530/0x530 [ 688.023673] ? perf_trace_lock_acquire+0x530/0x530 [ 688.028620] ? perf_trace_lock+0xe2/0x4b0 [ 688.032793] ? drm_getstats+0x20/0x20 [ 688.036603] do_vfs_ioctl+0xcdb/0x12e0 [ 688.040514] ? lock_downgrade+0x720/0x720 [ 688.044676] ? check_preemption_disabled+0x41/0x280 [ 688.049706] ? ioctl_preallocate+0x200/0x200 [ 688.054128] ? __fget+0x356/0x510 [ 688.057589] ? do_dup2+0x450/0x450 [ 688.061131] ? vfs_write+0x393/0x540 [ 688.064856] ? fput+0x2b/0x190 [ 688.068061] ksys_ioctl+0x9b/0xc0 [ 688.071524] __x64_sys_ioctl+0x6f/0xb0 [ 688.075420] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 688.080017] do_syscall_64+0xf9/0x620 [ 688.083835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 688.089026] RIP: 0033:0x7f8c9c1ff5a9 [ 688.092742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:29:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) (async) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:29:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) [ 688.111654] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.119373] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 688.126655] RDX: 0000000020000200 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 688.133935] RBP: 00007f8c9a7721d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.141216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.148493] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 00:29:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) (async) 00:29:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0xa9, 0x30, [0x7fff, 0xff, 0x2, 0x8f10], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5421, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0xa9, 0x30, [0x7fff, 0xff, 0x2, 0x8f10], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:56 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5450, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0xa9, 0x30, [0x7fff, 0xff, 0x2, 0x8f10], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5451, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5452, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 689.186093] ubi0: attaching mtd0 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 689.230056] ubi0: scanning is finished [ 689.245485] ubi0: empty MTD device detected 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x5460, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x40049409, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 689.438967] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 689.463567] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 689.489163] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 689.536467] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 689.582271] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 689.609045] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 689.632005] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2797992666 [ 689.651828] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 689.674409] ubi0: background thread "ubi_bgt0d" started, PID 2822 00:29:57 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0x4020940d, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0045878, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 689.802511] ubi: mtd0 is already attached to ubi0 00:29:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:57 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) (rerun: 32) 00:29:57 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0045878, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) [ 689.934547] ubi: mtd0 is already attached to ubi0 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000000)={0x80000010001, 0x5583, 0x8000, 0x5e5e5e5e}) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc0189436, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064c9, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000000)={0x80000010001, 0x5583, 0x8000, 0x5e5e5e5e}) (rerun: 64) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc020660b, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000000)={0x80000010001, 0x5583, 0x8000, 0x5e5e5e5e}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfffffff6, 0x3f, 0x7e}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x2}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x1000000}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x3, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x2000000}) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x7ff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x39, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x7ffffffe}) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:58 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x7ff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 00:29:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0xfdfdffff}) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0xfeffff7f}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1, 0x7ff, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0xfeffffff}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0xfffffdfd}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:29:59 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0xfffffffe}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200, 0x7fffffff, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) [ 691.349660] ubi: mtd0 is already attached to ubi0 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200, 0x7fffffff, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200, 0x7fffffff, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async) 00:29:59 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x2, 0x3, {0xa, 0x0, 0x1, @private0, 0x7}}}, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0xaa0c0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x2f1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x400000) [ 691.486227] ubi: mtd0 is already attached to ubi0 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200, 0x7fffffff, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200, 0x7fffffff, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async) [ 691.570247] ubi: mtd0 is already attached to ubi0 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x44, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x6d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x45, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x6d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x6d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:29:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x46, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x6d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x6d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:29:59 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:29:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x11e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES16=r3, @ANYBLOB="100526bd7000fedbdf25030000000500030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x2564, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe622, 0x53}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x4}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1204, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5a, 0x0, "40820529557813f5bcda9917643392a356a053be823eb7bc46c1386e06be8a5e0e954ff7cf76d346409925b7437e02ae05569d4be2e704b7c9b1a4e695ba171ddf373aa9652b2b4f9c910df134e03d9631f450237fa3"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "c04597b445870160abbed71a41c0f9071455af75e32727c164d1c716799e48e08ed8dbdb798b04ebfec6af434fc7d62f2ec8f2826cabe7b0d90abb389953434eb21d33662712264ab818b4564725db97bf900bac70412bdb6c76725f2aadcf6b48a91a576affca2dded31fee393813d1003cfe248eb7b00f455edc0453f68747ccdf324d3902594d05392a3977f0ceb01f9ec3a072f5b62ed88c96273e8457ac26a93f2c15de233b4994d65a8146bc39"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0xea, 0x1, "00710a775e37e270f3287f419c9d43a9f69c1e9a81892793da6d28cf6e87e6e1cc16139186fdb060b5d438f704b8d45c088c5feb1a2318a9c6dce3819b9c39744a2d2e89a0f72ad951e23c34749a81496d711878b4aa3230d2543ae9515cb9daada64ef2238ad1494fe4593730207a5d5a1ee740464c9b21babc3bb1bd1af0efbbc1f782f42a56ab2bc67d9e5954e405e7e38a0b33ec9aa06bf3e1a17e408e95b99ccd0b2e7bc402ef8af2ae713b2e30b04fd9bc74bd247f2e12b556f16706ffdfc5a4fecb22bf75d90ba484fa7f4a27357f5c6908c546d8b44ceb2094f71436243ace0c5df5"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12bc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa6, 0x0, "690bda59b301712e40017e0f08d164ba944e295755ca4936af49ba4ef3a3f917f4682ffb092b03fc7aa75596b2ac8f1cea12132029c1c8f627200391f3daffd74c04267f2372b32ad48c70619828c2048f246ba90467c8e9c93114341c4f2f7dd8bc66d4989bd01fa197f54ea5c1f9fa2e87684083f4fd434cd797a3698810fd84268e976b0e2099f884b113c6daee9ce3cf3b035ec976220762a950ddb903826803"}, @NL80211_BAND_2GHZ={0x75, 0x0, "6e47c4486ef4caf8739d9ccb381a3d9d919c15076eb8ded620d777fedb56d2a2b0cfd7b38788def8e99aee641ac85afb1136e11e5d854502dffa353e611a5a8b9e5150de182067c81402597503f350167e7adf95dd382556ab1ceebfc4bf6cc83b269d1ce4dc0b46c599e3d307be5b2eb5"}, @NL80211_BAND_60GHZ={0xc0, 0x2, "296be58f5fcd32cdb114c895f6fc382e0375a03abbad4dc090863cebbc0a3e6f268e39b55bd7c4fc634d75755c82988ca98bd4a19f97fb8db133d642ad5d6b596944356f62dd90437228be43ce2a024fa1874f1a9db6088ff89ee23492924fb79619c908f16716ce6a6b1c461f8a4a55261015ad8c48cbc4f4d2ef8869e722e37bfbcfe95f1b078f520588fd458a520331b0f2a4f964c945bbada3bc5ec9b7623b10eb5147fd69ed91d77bee71c04866842413fb02d025a6b6fce8ff"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x1f, 0x3, "77d1cda9687a1ffcef5e8612d68b5c8ec2727bd8accfde82fe2be0"}, @NL80211_BAND_60GHZ={0xb1, 0x2, "c14bfe3e97e409f3882a98acde2cf2f9f8f06c4d53aa8fd5fbfafda9db2f1d5faaebad0379aee2b4085932794fa3a592a07b0e8341e27a8366e314e71a422c7e85209bfce99d79a0000fca9b75a8ddc62013cb59acf6da5c7d4e6d0fc3abacac6259c1f91051681dc2a94ee0cea691498fb6c4a2aab9f1a92981475392b773c782696581e7812ee08273b9e4adc814f7eb755002f887ced9d61cb9be8bf9f088ba28326f300398f01ff000259c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1f}, {0x8, 0x0, 0x64bd}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x6fbf}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fffffff}, {0x8}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0xfffffc00}]}]}, 0x2564}, 0x1, 0x0, 0x0, 0x40}, 0x40080d1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x510, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 00:30:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x48, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:30:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 00:30:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x11e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES16=r3, @ANYBLOB="100526bd7000fedbdf25030000000500030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x2564, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe622, 0x53}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x4}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1204, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5a, 0x0, "40820529557813f5bcda9917643392a356a053be823eb7bc46c1386e06be8a5e0e954ff7cf76d346409925b7437e02ae05569d4be2e704b7c9b1a4e695ba171ddf373aa9652b2b4f9c910df134e03d9631f450237fa3"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "c04597b445870160abbed71a41c0f9071455af75e32727c164d1c716799e48e08ed8dbdb798b04ebfec6af434fc7d62f2ec8f2826cabe7b0d90abb389953434eb21d33662712264ab818b4564725db97bf900bac70412bdb6c76725f2aadcf6b48a91a576affca2dded31fee393813d1003cfe248eb7b00f455edc0453f68747ccdf324d3902594d05392a3977f0ceb01f9ec3a072f5b62ed88c96273e8457ac26a93f2c15de233b4994d65a8146bc39"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0xea, 0x1, "00710a775e37e270f3287f419c9d43a9f69c1e9a81892793da6d28cf6e87e6e1cc16139186fdb060b5d438f704b8d45c088c5feb1a2318a9c6dce3819b9c39744a2d2e89a0f72ad951e23c34749a81496d711878b4aa3230d2543ae9515cb9daada64ef2238ad1494fe4593730207a5d5a1ee740464c9b21babc3bb1bd1af0efbbc1f782f42a56ab2bc67d9e5954e405e7e38a0b33ec9aa06bf3e1a17e408e95b99ccd0b2e7bc402ef8af2ae713b2e30b04fd9bc74bd247f2e12b556f16706ffdfc5a4fecb22bf75d90ba484fa7f4a27357f5c6908c546d8b44ceb2094f71436243ace0c5df5"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12bc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa6, 0x0, "690bda59b301712e40017e0f08d164ba944e295755ca4936af49ba4ef3a3f917f4682ffb092b03fc7aa75596b2ac8f1cea12132029c1c8f627200391f3daffd74c04267f2372b32ad48c70619828c2048f246ba90467c8e9c93114341c4f2f7dd8bc66d4989bd01fa197f54ea5c1f9fa2e87684083f4fd434cd797a3698810fd84268e976b0e2099f884b113c6daee9ce3cf3b035ec976220762a950ddb903826803"}, @NL80211_BAND_2GHZ={0x75, 0x0, "6e47c4486ef4caf8739d9ccb381a3d9d919c15076eb8ded620d777fedb56d2a2b0cfd7b38788def8e99aee641ac85afb1136e11e5d854502dffa353e611a5a8b9e5150de182067c81402597503f350167e7adf95dd382556ab1ceebfc4bf6cc83b269d1ce4dc0b46c599e3d307be5b2eb5"}, @NL80211_BAND_60GHZ={0xc0, 0x2, "296be58f5fcd32cdb114c895f6fc382e0375a03abbad4dc090863cebbc0a3e6f268e39b55bd7c4fc634d75755c82988ca98bd4a19f97fb8db133d642ad5d6b596944356f62dd90437228be43ce2a024fa1874f1a9db6088ff89ee23492924fb79619c908f16716ce6a6b1c461f8a4a55261015ad8c48cbc4f4d2ef8869e722e37bfbcfe95f1b078f520588fd458a520331b0f2a4f964c945bbada3bc5ec9b7623b10eb5147fd69ed91d77bee71c04866842413fb02d025a6b6fce8ff"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "29e13bff3c831637c2f4fc0f4c4007f961ee60940c4620083daaa5c21e084b522035460fa35f44f81ff8202373f2c124b74b6a84c6aff6bae997d94b158c5a20820ea1f887ec6de30bbce026aae382cd69b0b11e430bd85698c21441246dad60dea9000186020c7ba6d1e2d14163a9f59a97ab4c2fbe3aa13cad0ea9583af5b4652d54a10929ceb2b2e54b7ec226eeb86d8cc52c26c6f2bbe30c3772241a4409b74b24c9ba0409a0f378e63e216ba1a82de931b3300df68b6fae39f98921a12b3795d0fefbf5988042512192aa27729f6778edc7e3f159841abc1a94bacfdbed16c63c9434e9e752a3f26120c3b291c3782cd53bfaac3a686e1f57f9d045ebabb3ab6610f0be9e3badfbc6d21c81c6cc1b2d3f05755e8a79e013d1b513cfa90bfb9cde546d7eb467cd85199a8c167be8efeb6e604c41f1e00d2666d9014912989bb526c056695fc6929d1f622a0d76f40fe6286a5382fea4c42a19666bacc37d02a812cc78ceaa2aa776db35a9ec82b0b953adf4529c80875b3baf1af6980ec6e45a5c6bb9f7fa603f5991ebb49f008e98393513fc37df992bd28f4f3beb92d348cd59f7fad8dbbb50da086fa02890e44472f872894a8b468bb08324ae48fadb5e88c1f6af945b6c01cb31d28633ac76ccd72ccc8cad296fc2f0af8deb146ba70fca567e0a551917c7e8e71de45b572b08b47d45232d87c9863584b0d75acb5bcb6a93ec0a651857af8da9a24ff75601583ff332d5e4908ec417e3e9b6977d96b57b484795c8631376269e23b9447f9caff401a89a282c58232c4fd1fcc827673a36e8d74ede186dcf7fe7af3f866e26949d854b660d6647c58aca044527ed9fd64ae665ed6ab9c198c03a66a673a6256c623d1f1298d6e7d44c39fa3ef43fa2e5006351539695a07f7b5f220cb8bcc5114ede221aafb2e4f818a4a6770fbf839c3932bc006a1beb550cf83933beb8fc84faeb9c03d32e737e651b2cdd4e886e8e44747e7496c632176d82c488573d947309d5f0b5ea35971910758a0d7be712a4217936f55a5fdc540d6f71b3d9ccd934d5f77c44fd11fd23fe5a0b3728640e762c7e384a2cce7b426c74a51b7903f845fd1ec4f900f18806e88733c4f1238e96293eee286e65d3e0e5aa8e102937e40fa3422c38ee4c7ed091ba58f395329662eb883591817acf4a844c13838e8ba0930f72e3848946878c2778b7f42a3121d1fbae760a054914438b5de6850cf309cc154f5cc378e39ad46a764d35507ea1c14bb6aa9ec7ffa46ceee7c611b9dd2e8d5360b0924577a3c7e654616c1f51587b380e358c79754481187acfb4ed04ce6ac5a4853ffe0fe0166e7264e6f63cbba496c6646badfed5ea599bc51860fe42c23b38c71bf51d216ec688795c971e21efcf758ee8af4a74f0aafb2a290e0a804bd934766ed4f38baee45dab5d45ad14a68eccf1551fb961d72c6efa33c80da8806f9f0782d572592cc69122ed1555628106f3ce58546cf25337bb0d667167f065c3f5ca9b52dd28c48f7295a27bd146af66214d8252051466b7ae9fb34ac03a4be030ac63194b0105cf35246d4fe9570a27fb7c499de0f51536cac8af4b2b8a61c42d835b9b930e2c2774137e02a2a985155ce525278c5ac0738e2f92b5ec2d96c2f351d3ca2023d0bbbfe48f39201765762baf8eaab24722ae9593e8da45e5f501837443f2c13bce4c1cbff6a28dda19502b91eff9bfa8a150d519d78c1ba81de2b6d8fd4294d2222454d9b95802e342268c8c5eb1969d9dcde89531195c306fcdf28f3e9a93438d95517239e991a7b97d9635e089c04897a61e906a1541320e922bcfc5839337c7f2584c48bb369bedf5ed149e49078ac7ae8a197a2baac86b56f6a8b88eec8603c9c1c8894e840b11dff9ea24fb2e31363301266f6f55051ba6e3664a934f2913c1c2e6c718583767c9187ad931948e6d7974519e71472e5429ebf57d3a25e6de9d698eb9d2d9c1b39fb256f2c06f74f4d6b5853cb5e7b24cc84195d371a65ceb7bcb81c5c44c4f191ff885d24d9a6aa81cce42721bd9b327d85ab039d5323f6e9b6689be19fc16e0a4778e7a8d0605c72b33a2cceaab5aef69adef0ad2939412179e0b69552eddf4d48c54a0fde601c009ea659297869037a3d61ed1d6545d83f12f54b48271d8687e037e09b3de145b076405603db7fb6c5e03d533f06ad6b7090b0487a6d0e6c9d5f6967dc3587e9162b871ac47fdf9d725bc090abb6b75504f27e7b0984c9997e0e4de580302dc30fef3ebd693cecfe5465567bf1787dc1693de5e6c1d84fb94e897388503f4265581bcf5aed5c1d9a606d19b504b8bc054ff9c6267f3d3c83448f7444aea2d791e9aabcf0020c33f84a8694ea8cfe93304676b58000efc96196d15c3e7d9860c13991a7fcc85ff97304acb5b9e1e4f9f3add403c915b72e4da2255a34d19cb4775386316d5e9a35edb0e28d3290d9b332c3c3fb1a46e93306f4c4ed317962c5407a04730c05683c4a0e825601fc020b6bd80ed799eb3afec06635265c9831d760c1885172ffa6767d9ebf34771cbefac6178c75ba7ed17d14c98eff2cef3980b268c23e291a24feec87faef3d912967aa2e53b71c9ae2a401f63b11abaa058084338e459000dc8bc678a702278eb46907282712cd4673a884d7b7b36f17f601e8334234974ae4f938ebfb85dbb193bbc19aece05b1e571aecf941a6fe457d5526fde19168e11bc3f1f2bf1afd236703043df62341d842bd41e7e928e4ad7011f66058ddbc75513183cfcd36057360299ced680e29725bc666148c5a48d33acbd19ae2edeadd989c70dc617d2dd7300aae5dec71de8aeab56fd8e641a9498828f09e2c17b668c21e0f9b1e12144bdf217d0d3220cf50ca69de3986df8aeb92ac8d38cc25f947866d6c460138c3bfcc28c1273a243312c11480b51796dd478d0b7d8941a93465348073bfa87fac46288aa23c4978c38c08044c255d34ef1bf1357848c4bce09503f62e3f68283f00ffedcfa738d99db71e6313a6b0879d65700a298d788d16a8c63a7e65150af265c5518288e39aaf044941868855635211497cc1ed1207a4cafdf48d48b9d252b4fcd26a197c6caafdaab5420040949b2d513a12e36cb38c7eb54111b73e652a6d1b417b24564faf84b51a800d43459634c5c581b8acc2eb758fe626c32e415f018f401bcb51195d281a2bd0f040b61bd0aed1e4490adc83dacee2ffe67dc0de97dcb86f6743bc28963223a4d0e75c9fbcbca06b1ea52ee92f4a4d6e7aff40b16fd5965a613c954bb075c41f8190361a5064438c57689772dd48aec563424a37b6fabfcf41746bf02da84b75489cd9e90f1b7904b6af558e3bc84202ce8b5f20e1176d1d77206ea82b83d45c6365c4c060e860bf47f8abc9443d8bf1c2db27a44c603611a5f3330bf825daf3fd6431fa2be677ca54b71cb4d3f325d9716792f47b78f39b15a43ea2977effeab86a658c58358115e86f0c6d8789712de90278234f9658523a0639fa00273a28c96a9d8d207f0374bd68ed8a847dee067b832ef729f087607e98f7d142807cdf787a1c86cc66a63e0d6cc9fa78ec0c1e800b3dd972e3b30fea7c4cb4c69800dad91f627e5ea9c328c845002189d7b5f36216eccfffd6498dc31cde9134e5a051fac53823fc3ba7314d5f2762e44ce690810ece1d5a6b129168c937226d82b887abb4eb83bfdffb4dfb593ad4b24ba7d6935ab115b830987636d77ea65895968b999e063ac39da495d9ad29b62e98f01a6d9c29748c99a987e97c3bbe9a58ce411969b86f2147ddcf635f37983088a98a9c6d008822a688a413dd8aa8bcd83f5b26b646aee5b0e13c6fc294c3b68d9d3f52e099767c4605284ec20cc37bea9d27ee60afdd9359bfd5cab72cd2b03a959f3dd45d034271f18c685817e1d3d604765bdee53040a6b26472864db2df371db5994accc183aec0cfaa6a07c7a52e2e0c6f24a66b3abd06966cae08cb6a07a9b8193e49df899024f77f07e494e6a467c336b7bd2185c567f22a860854212b1c73703c1439a33c57628256bc5f8d002de6d1371aaecc2c5f5b9c455d01e15082af057c938350783f5291a781d106e5f088bdefea6dd2689ba72b55c09de0a604017ada5f760059e815d26ee8da3be2a881baa3b689d8d015f0e070ef0907392e318353a16f69e1171f33cf4f65308bfde22766560fa39bbb4f53695bb660feeafdd675e737b642ce686cde7ab0578ae9f0a517b0fa5eecf54d10ea9b410107dc60030614fc4dd96b65d8fdb324f88b2e82f37fde88e9ba4c4643850cebe509af85ddeed360a93441c818a128d521df21d6100ed7250704b4b93ea6c78f41265c170ed757e5f1930f309ca69808e2a4306322a6cb6a4e8d14d2606c926902d4aad34665aee7121d25d68b22675ae49e0a84ed9cc2e090596a54df5c51254b892ebdf21f109d827f2c49d7e8fa13a9f22b6bce67eae23d23910797a1d90bb8bcd9629faabfea441be65ec3f9f7058390f80ed6b2fe4bb1b79b2564f9d1dd271283398078c100f4fb618eca17a35c8bbfc0d9e66ee7613f553f12787e9401b0e852914cd88c1e403c11e216c21fb45bf78a749becb0bac56ae8a805869499495795579cce8c3d940864eeb94ca925a9cf48f5d9bb7546342b98deb51095f3ada215caf003f7f13f726e5013ce2db9c42454d63c248db9119a60a19abd74df62cf0e84b6a975536b0c2cf37b3b7a4369ee4e3a77aeb4eb3fa168d9f7c979484378436e478fba0dec30198d3a785e664f174af6b23b95ef8dc481985cc8e53681f25393dfba6e568f612904bed714065369858dd2987a5b5a890598e7d0a4642b43ba34aa08377482522b100f8c36bfa01070101a5cdc45afac0e10d4dc4e2820a004784aeaeca178091a2d8c11595edd45095470ab278d2d54570dd4172984ad1e6ec64689f247d97ea7c0b9fa4f9ae7a161108137465e76dbe33d47e760005a6008f55eeb62c114ad70bb06fe60c08bf1d9500b4358650db9f9555fa855a06ec7f0cc497b1adf275b4adc9e0485d67fab843d214603ab9ceab1b1c96f849eb8bf223b5c235c440bdff2dd80056ddc6a5ccfa39c67a3d43060594dee068c7b4b464e51409c9af2c4ab0741d7aaee71d3720b36de161893c828765d023754437fee9d28e5859c3f23cf9c9a4985ae0705b3c87392b6ef655b441a57bb7666652caf8094552a8e6bee59c9a23f8fd997185bb6dceb6562860197348b8c91e549945af3c675c933ee52d57299334c3722c62b34f2150dcb8d0ae25df979dd4694e80bf2fb738148b9fc599e2ee6ce2ac376d87a2d3e317c2f6b7a764f628305f857c11400cb31118a6a5d3ab7273eece391526edfa85d371478afd2e5a4e8cb87d30f2b69d8cc444d507f48c36cf304d1602f91e73b20dc5a34566db34b220636bed23cc115bd5453d7aeccc883e923e0863323be280cde11bee478085414aeb7240fb46c7228a547ec954f128a872c263a843c281cb5d2df1e5d79bc626dae8c13f93cfb3ad617480626889a2b3fe12867d4b4d95d634eadd994712747ce5510d614388f2d180a4a718837859325c9c0437aea08431a15be1d5723b16bb8c82d1f5bca0e6c95634eb61b246ef3db083450ef41a6020bb8b1b2d47ddf521872c91519cf04bc73545aee23f71cc09dd39a0e6d99d583eddc9332f1e285ff9b325617210d142575b5fe71969a75cb9942b618d7e12e5d9786c136787e0f9365671d93a5daa9ca94febf2d92cd5ef6fe37a8dcec639"}, @NL80211_BAND_6GHZ={0x1f, 0x3, "77d1cda9687a1ffcef5e8612d68b5c8ec2727bd8accfde82fe2be0"}, @NL80211_BAND_60GHZ={0xb1, 0x2, "c14bfe3e97e409f3882a98acde2cf2f9f8f06c4d53aa8fd5fbfafda9db2f1d5faaebad0379aee2b4085932794fa3a592a07b0e8341e27a8366e314e71a422c7e85209bfce99d79a0000fca9b75a8ddc62013cb59acf6da5c7d4e6d0fc3abacac6259c1f91051681dc2a94ee0cea691498fb6c4a2aab9f1a92981475392b773c782696581e7812ee08273b9e4adc814f7eb755002f887ced9d61cb9be8bf9f088ba28326f300398f01ff000259c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1f}, {0x8, 0x0, 0x64bd}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x6fbf}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fffffff}, {0x8}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0xfffffc00}]}]}, 0x2564}, 0x1, 0x0, 0x0, 0x40}, 0x40080d1) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x510, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x49, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) (async) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x11e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES16=r3, @ANYBLOB="100526bd7000fedbdf25030000000500030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x2564, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe622, 0x53}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x4}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1204, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5a, 0x0, "40820529557813f5bcda9917643392a356a053be823eb7bc46c1386e06be8a5e0e954ff7cf76d346409925b7437e02ae05569d4be2e704b7c9b1a4e695ba171ddf373aa9652b2b4f9c910df134e03d9631f450237fa3"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "c04597b445870160abbed71a41c0f9071455af75e32727c164d1c716799e48e08ed8dbdb798b04ebfec6af434fc7d62f2ec8f2826cabe7b0d90abb389953434eb21d33662712264ab818b4564725db97bf900bac70412bdb6c76725f2aadcf6b48a91a576affca2dded31fee393813d1003cfe248eb7b00f455edc0453f68747ccdf324d3902594d05392a3977f0ceb01f9ec3a072f5b62ed88c96273e8457ac26a93f2c15de233b4994d65a8146bc39"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "6c85aca23e50297a9e92667f760f1ab19633e982d5c0e297d5fc4a647f76db458d409bebb6cd83c5b20cb92485a5f192339c8925c5af48bcf205f13bdcdff2e9ffed26a2f622c7f7ba48a2303ae67f6b5fc31831c9a450583b803a8b7dd09534f0a98cdd3fc85101f6a2ded88d0d8abfb72f983c702bb6f182423f3342aa5432087e289872adb35f686247a7c252c3d2d36d8ec3152093d9d647e46faef80ebc4c00a9d7d46243ef3216b4222ee7f012bf353bea9953fe1283421bf9ea8e1f33569af6e14fef6573d229e8b7bccb23c3e4c6f35fb61103ee4bfd31a216a039b4047799dd2f444973f02f93f635ccc8cd06d1546115102206283a8cf82b692cb931bbc9f4a4ff1efa8024136d2c5fe2f0678d44fa308131ac20d3b8d35121306fbf05e2c2b22a5150459eff7d54888a155d9550b3dee28c96ce205a4261cc0db56e28920cd927f4c9bc4c9e77921c61f81254653a97b2fd600e1f7c34d39186d229e102cfed0f6689c7423ec4ea8c65e52bbf1f5f24806277b93a20e0879364270b9a179df339dd5bd817fd575021e18edc6da954e70f3ec0509d43843df44713f55210937297cb318a968d7b24f380101df8bf81f215223df7476c6398110e17d42406030013f246f2121bf6d5631a241f5561a6249eb73ba200f1da3a29760b73bdd0af985064473cfe1b64083eb360febc904e33776a240aafbf9ea3a50ef3a97347c7c03fbdf27170e4a6509568f6e6108ee9e2dd3732cb81611191bb179200acec20fe8377b8f4ecb2eb208a238abcc53f0dfb2a1a2001653cc21dc77e40443521e6db1c67e343f4ca9a6e76ab31f1b7bd68665a6eb0024c84826395a8cd7dbef6a48ac12d9bf3749ff244ee421c051363d790d0a63c8511a7bd3ac5d1f325c7abd62da7451483735ea686792598c494bfdc4c3cf6d061c953d936430ae17c0310a076ae06f909f3cd7e6abd5fa6d70d83da38c3ef07b1c4220b4cba2870b9a9d6fe49441718e0d520f97122d1c6476c61772fb705748932455da0299622a248edd353d7fe1f9eeaa7b32cfdfb4a790180e6d02b293b8f206ec95d17faff61a89465b077669c3bbfd2ee8693b8cd29e45de11abe5241348c6ace346fc9be90ddf1ded94851095cb3391eddb57efb58f30ca2320271c3b6258ec98c5a3f280256a36e51449d0b4f945b718ee6958412999637f7fd238f1dcfedf6039a2fdcecbaac61678554efd515bab1e246860f5bc1b92725bb6e4d6eab48f014755d0222e8d51601e120ecda848efc45c4db2e89757a89b9b93d1335deb5bf72932e93c156a199034005b21cff41e5f6973b1d35e13da753730f15188628a10ff1908987d9dd71e99f4cb749f0890c97b19f5330d908fa7facbbd05200b5a78dd64adc605e0955b00c12dd8c8689967f82b873904c9cd4e292984ebde16fe5a87310f19c8a95f37d9b5cb4d21d9c92bddd2717f82029877ad2b55de4a8226aff94ab8cf230e75ef40d0545534f8340314f93e814f183157d9084f40a4d8d734753c0f2b929a3a4f2964aaec1d18a97073fbb3de592a4d7e6bc69a8bb0f33fe179cda3ef859605777b5ef950001753d8b6c9116ed7aa48f3f9fb8207036274b6cf9d986bc47e1b8aa9d73623a2196697b38ff1ac861f5d1401c0221511647acc3c4051f64ab5c55a6209d8007007924361dc41f4b7ebe07f472f008ffa182a57b9e65b8dc2c86c869800f028ab7796c8f520e969cebb06d4290dbd2c8f0adc3d269a5c41adcb036a1c5c13f44b1a63c21b36e0e71203a5591a6dd73a6e060c0d98a643476a0ed1283e88ba2418a5fdaa3071ae8fe2064ceb66da20e78f528e84ce54ee1c0ce1f73cc92eb963204a2948dd15af2f853a71616fa828e7798ac246ac871363001c5d7ed7bb022deb201ba70429e3af43a0f73cf1cd2d9cf309be8af023f1ce67af8554f4c59a5678dfdb992d06a0422553a7b15c9f624226bd0aaac542a22f3de597dd790a914d3a9540401ebf5327ac8e914bb1c602a88c9ea22c4ba6001716bd04716de2852b6ad88d592594917b9fbe25353c9afbb4ff5f67cbf66fab0daf7e0268d4961c51eb95264eb01aec1799553ab83d7ce7eadd2a88de1ed55307e7201b24e627cb65757edf388ae982e3a956569efdfd8f71efa7119cf4f472f6412ba3e959658f973e8c6565815a79916b448408692fea428692b6fcb3391a1c1dc924d6d0324ebfe0101c09aeb397fbbc9c89f1f87633e97e8ac2f6ad7aebb5102a8572329d70f15012e2ca7223b0283cdd6a76986ca6d044d98a92e81333ac4892d8d0f2cd0a4f66bc258c6d619373d1001722705aa3d4d8af8fd4d3d5c5d340ab42f891b0e4973a5ab01f9403d3f1476f4d60e5c84b461611d9b58c2ddaf5b1d6cdcaa05cb22fb1360f2627ff846941643b6038086e361e9aca0726d97417119525908435eafbdc53281e8507ce72b7f861fc54569d2fc4505bf5ec4886a085b4efe49f739089f443c23c6e0071e91734442ce5184cecd9e04b0b78dcdfdd996eb0b898c5fe0f7971ea736946f92ae221aaeb0869f579bf68d41f4bdcd84c69c7cb1c19594885ba1d6bbc2d9c92d8d7249d4de49d6eddcabc5d42a3fb0545b6cff6a64e1c7a7ef3e24cde2d9e51fdb8b573afe009d7eef76c208b60b56b2a270e05990f5280cf863273bb1486a325b2857e4fab13a49991f530f3d14b8da065d83cd04139bdd41ef1e85cfa83055b1dc21ca2a0baa86e220ca15ca6b766d40d94de251be7e6366631c8edef6fcd2e96b913cf87dde9a5297fb0ff4a19cdfc08c6b92035c25ee705fa23f70dd71ba96ac946823fe67801a8d6fded613736fc684fc5eb06f593d7c504a06ab54f60232f26f091baa21c2d18a6700de27e2788a62ba5a20f6a33a7c5574970901a586f8bce93ed53948afd5ee13dd0d31444a8a8e49a7f7124bbd11ed5a7843a27e471a1a4800898f14425b042fb7a8170948a08e2498375a002d45c99f4e82c26eebe9c0d5ee493dd8e5a16057f41d29094a3295caedd056fa1066b5cc1a1d5ea56d67ebb066eb8e99507624d3f26e42ea2b0eed76c5e81f9d384a9be0edfb779474a3cffca355685132c6ed1f895c7d638158593345f4011ac088114c7138066dfa3b1681b7681b2c83b0fe0c4b101231c05b17f9a068c821d50515efc1e60ed8daefc1ff9397ae997379685df07dcd3aa5c54bdc1d843148da26c68f691f135287e5ba5a0bba3523bb9e99eca2c9890351209fcf1a0ee6cd1dd5327dc97fd76d778ecd18bedba7d9052429f6e604a14216a04b15f28234e805750870fc2e891870c911ae0eed61e5470316adb93ccb0d87a2681892f7c398b4879728f598af369bbbe4d1f2e9bb29cdcc497a57dc50bf4882d5cc5f7ba91dcf7cc0088e888dbcb86d4c447a7370ae9606f3f7c1d8ebe26b09e39d72fc8017f5f24cdf95cc386f779d58c2540fbe0c7ae410700a2dabcbefe0a23960851c0f4070eaba0263429d3f0daf933146917f0a364a19027c8eb9106a1b6f11ac902724e6d83abe947a458de9b3fcf352a311bbf458242dd69fe8df37738f04a6328bda6398ee2c98ad23eb82e61606292eb82afbf0db59d596819360339cacca39988a1ebb28cb98c55becbdb1dcc797ec801fb4d042716a1cb62d04fa5f1c1a01964a64c66866c4755bd9c235b438f0e9b40392e4e6460fa1f9def5c66f5e7d469e61984d1d580d32ce407a1271333c1985693eee97061c7b28c0fd763ff2e98cf6a62240e0845881d7b8046b13a298c359f3be909e15bfcdd74746b6f43c8dbf2dbf83616b3b635732fc8552e3260110c372f9210487add5801006c1f0f9af0feb5244845ef2cc9b97b5b0b691839d5d02b1a1c8ded72c6c8dcfd5d79d648841a2e5c00264376022fc20fc1b815ba046e19d48bacba8007ea5547a5f79e412f0db5c56d4461fa46a138bae3417e56cf76551c882214baafc2f7b45b52c0a0744ee403b476113604290bca9e1eb05c7f6bc49882b0638deca86b604b6524590b9c28535a492298043f6a6ef038df6cab4740fb3c2b7e533fe1b20249e52386a38c4dac9214e065a6228df994fd12994a1023dfb84efe6e11084eedf492d7f1909375b9cbcb717de89f3b78d16351a99c3911acf1827e5259a9877041a5d95d681c8cefb2e8ccc9fd73da158f5c5e19d720730d6311ba80771ded5649ee4dbe999c44a0a21179d37e3713cf4d8b4d9b4d8dcb79bbedb3a438ce3198a7d150d2dbb2d7e71a9566764e824fa1b195210d537d7a9d9b7c33c22438d0504998d7ddbb83bd4ea284f97e070f643ac3db388a21f6abf6dc6de73cb6f59f42ee7959c027b38d63c8284848d473c3d2ad9e7729b874e248b554adea21953fad719f39796ef1aa322c2e99ab223576f6a00aaa5e8a274b6de59d168c868222e1a7f083429568fd8a7a1ee509356e99d073aa57c662363bfcba57a239cdcf5891336fc9b632d2b20f8235088ab3cfd42a0bc10c56c9929ec2bdf2e223495b7f7b2ed32501c300ef6e1387feb5b81745bacb9524e7f8b845bb3e2759c6e99b63267c75343283cd49f7df38929dad5b159e8d5d120f56e030339a228331860a36fb333ca9d66ab7efff87c4334bc1a45e7859d1fadd186afeb0f0fbe15343c2f6bb01056e0d002f75a0b45f32793553f1358e8bf8f8e9f2b35f5eeb0fc6d6080fd049c3662988e71af44ccb9ab0f622509aac06b33fa042cd99e1b5ab1f11b171114c83d70b33d6d0e26ef8dab009e394f16597494de778d635ded6bea195878d1cee3e5bc95c3ffca8b257876d2dcf4d0633164742c8ea7575bc9ed994dc3d22f533345acc055649f072cb9da662c989f6bfe3bc4921f76b44cff5b2e5231f302f9f201a17e2e1f5e90be08ae662a3ba6fb3fe3fd04903fc1b8981eb3ea76a298fafff2bd8743654d7c01e8cfff9778508239f1e8e42a79cf246dd96b3a5fc390a21555eb2a2dc9a0bff0b907bd0b173185e84e6361f7c64e18206268cf54924901e233f52e9a55ab199bdc5eed72dd886076f1f352d833cd8c26edfa98722aa4b13cc3a82853ea35570c8be7e0df9c74d6b976ea3b75460d6e1f07fc37f27baf86bfcd99ee27839e82f482bf991615332b67d912a88ae746c6ea2cb0ee8ea43de9a4d7504d1a4b788bad854c5a109b240f826c88db00836c91699944e52bd122b8f8ce67f06564e4dadf4e7ae18900fc083ba6e1330e79eff5510b5cf4ba2770b85f96d1b3acc29877369a0e52a9a15e03a398e944f3e5feb76126d1168859552503740c539469e763a7e8b20ad414aad39f7b59e1ea0331f3f62584abf4218b867fd554150f4b72f375f585a838a1634cb3dac2855319f57fee13ed9c7403c91eb8386a936feea786970cbdea43af3f025431b280b2f5088e8e384af7a3a5454fb4b919302678b1c1154fc7cf49cb127a835db9172c5623d77f40a448844e50a8a057dc96ba743f89b154c3177cda004da66d9f1f9e1392ad410ab7fbc982c6438147a9159fe5f28bb911bf052ea2fd26a83365f0784f41663baaf2acdb0ea0c145e505164dafc7394a14a8a60b357be3242bc86b1d3f02ff34913f96f89a15c546ac591ea11da0df82fd0cfb2d0a3dc92df3744941102086e220b366ca7b6f41e85f2ead43be702330d7f9ae0b59bc878a77a19bfbebc4b050413575dc0368dd184b3bae458a0a5dacd18cb144948c8ac24367748cc397714fa347b79b3a9a564e5459f0a4b1a9b3889c7918d81bfe0902b53dfbd331a740a54bf6348cdcaa"}, @NL80211_BAND_5GHZ={0xea, 0x1, "00710a775e37e270f3287f419c9d43a9f69c1e9a81892793da6d28cf6e87e6e1cc16139186fdb060b5d438f704b8d45c088c5feb1a2318a9c6dce3819b9c39744a2d2e89a0f72ad951e23c34749a81496d711878b4aa3230d2543ae9515cb9daada64ef2238ad1494fe4593730207a5d5a1ee740464c9b21babc3bb1bd1af0efbbc1f782f42a56ab2bc67d9e5954e405e7e38a0b33ec9aa06bf3e1a17e408e95b99ccd0b2e7bc402ef8af2ae713b2e30b04fd9bc74bd247f2e12b556f16706ffdfc5a4fecb22bf75d90ba484fa7f4a27357f5c6908c546d8b44ceb2094f71436243ace0c5df5"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12bc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa6, 0x0, "690bda59b301712e40017e0f08d164ba944e295755ca4936af49ba4ef3a3f917f4682ffb092b03fc7aa75596b2ac8f1cea12132029c1c8f627200391f3daffd74c04267f2372b32ad48c70619828c2048f246ba90467c8e9c93114341c4f2f7dd8bc66d4989bd01fa197f54ea5c1f9fa2e87684083f4fd434cd797a3698810fd84268e976b0e2099f884b113c6daee9ce3cf3b035ec976220762a950ddb903826803"}, @NL80211_BAND_2GHZ={0x75, 0x0, "6e47c4486ef4caf8739d9ccb381a3d9d919c15076eb8ded620d777fedb56d2a2b0cfd7b38788def8e99aee641ac85afb1136e11e5d854502dffa353e611a5a8b9e5150de182067c81402597503f350167e7adf95dd382556ab1ceebfc4bf6cc83b269d1ce4dc0b46c599e3d307be5b2eb5"}, @NL80211_BAND_60GHZ={0xc0, 0x2, "296be58f5fcd32cdb114c895f6fc382e0375a03abbad4dc090863cebbc0a3e6f268e39b55bd7c4fc634d75755c82988ca98bd4a19f97fb8db133d642ad5d6b596944356f62dd90437228be43ce2a024fa1874f1a9db6088ff89ee23492924fb79619c908f16716ce6a6b1c461f8a4a55261015ad8c48cbc4f4d2ef8869e722e37bfbcfe95f1b078f520588fd458a520331b0f2a4f964c945bbada3bc5ec9b7623b10eb5147fd69ed91d77bee71c04866842413fb02d025a6b6fce8ff"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x1f, 0x3, "77d1cda9687a1ffcef5e8612d68b5c8ec2727bd8accfde82fe2be0"}, @NL80211_BAND_60GHZ={0xb1, 0x2, "c14bfe3e97e409f3882a98acde2cf2f9f8f06c4d53aa8fd5fbfafda9db2f1d5faaebad0379aee2b4085932794fa3a592a07b0e8341e27a8366e314e71a422c7e85209bfce99d79a0000fca9b75a8ddc62013cb59acf6da5c7d4e6d0fc3abacac6259c1f91051681dc2a94ee0cea691498fb6c4a2aab9f1a92981475392b773c782696581e7812ee08273b9e4adc814f7eb755002f887ced9d61cb9be8bf9f088ba28326f300398f01ff000259c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1f}, {0x8, 0x0, 0x64bd}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x6fbf}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fffffff}, {0x8}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0xfffffc00}]}]}, 0x2564}, 0x1, 0x0, 0x0, 0x40}, 0x40080d1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x510, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) creat(&(0x7f0000000140)='./file0\x00', 0x11e) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000", @ANYRES16=r3, @ANYBLOB="100526bd7000fedbdf25030000000500030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8011) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x2564, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe622, 0x53}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x4}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1204, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5a, 0x0, "40820529557813f5bcda9917643392a356a053be823eb7bc46c1386e06be8a5e0e954ff7cf76d346409925b7437e02ae05569d4be2e704b7c9b1a4e695ba171ddf373aa9652b2b4f9c910df134e03d9631f450237fa3"}, @NL80211_BAND_60GHZ={0xb4, 0x2, "c04597b445870160abbed71a41c0f9071455af75e32727c164d1c716799e48e08ed8dbdb798b04ebfec6af434fc7d62f2ec8f2826cabe7b0d90abb389953434eb21d33662712264ab818b4564725db97bf900bac70412bdb6c76725f2aadcf6b48a91a576affca2dded31fee393813d1003cfe248eb7b00f455edc0453f68747ccdf324d3902594d05392a3977f0ceb01f9ec3a072f5b62ed88c96273e8457ac26a93f2c15de233b4994d65a8146bc39"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0xea, 0x1, "00710a775e37e270f3287f419c9d43a9f69c1e9a81892793da6d28cf6e87e6e1cc16139186fdb060b5d438f704b8d45c088c5feb1a2318a9c6dce3819b9c39744a2d2e89a0f72ad951e23c34749a81496d711878b4aa3230d2543ae9515cb9daada64ef2238ad1494fe4593730207a5d5a1ee740464c9b21babc3bb1bd1af0efbbc1f782f42a56ab2bc67d9e5954e405e7e38a0b33ec9aa06bf3e1a17e408e95b99ccd0b2e7bc402ef8af2ae713b2e30b04fd9bc74bd247f2e12b556f16706ffdfc5a4fecb22bf75d90ba484fa7f4a27357f5c6908c546d8b44ceb2094f71436243ace0c5df5"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12bc, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa6, 0x0, "690bda59b301712e40017e0f08d164ba944e295755ca4936af49ba4ef3a3f917f4682ffb092b03fc7aa75596b2ac8f1cea12132029c1c8f627200391f3daffd74c04267f2372b32ad48c70619828c2048f246ba90467c8e9c93114341c4f2f7dd8bc66d4989bd01fa197f54ea5c1f9fa2e87684083f4fd434cd797a3698810fd84268e976b0e2099f884b113c6daee9ce3cf3b035ec976220762a950ddb903826803"}, @NL80211_BAND_2GHZ={0x75, 0x0, "6e47c4486ef4caf8739d9ccb381a3d9d919c15076eb8ded620d777fedb56d2a2b0cfd7b38788def8e99aee641ac85afb1136e11e5d854502dffa353e611a5a8b9e5150de182067c81402597503f350167e7adf95dd382556ab1ceebfc4bf6cc83b269d1ce4dc0b46c599e3d307be5b2eb5"}, @NL80211_BAND_60GHZ={0xc0, 0x2, "296be58f5fcd32cdb114c895f6fc382e0375a03abbad4dc090863cebbc0a3e6f268e39b55bd7c4fc634d75755c82988ca98bd4a19f97fb8db133d642ad5d6b596944356f62dd90437228be43ce2a024fa1874f1a9db6088ff89ee23492924fb79619c908f16716ce6a6b1c461f8a4a55261015ad8c48cbc4f4d2ef8869e722e37bfbcfe95f1b078f520588fd458a520331b0f2a4f964c945bbada3bc5ec9b7623b10eb5147fd69ed91d77bee71c04866842413fb02d025a6b6fce8ff"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x1f, 0x3, "77d1cda9687a1ffcef5e8612d68b5c8ec2727bd8accfde82fe2be0"}, @NL80211_BAND_60GHZ={0xb1, 0x2, "c14bfe3e97e409f3882a98acde2cf2f9f8f06c4d53aa8fd5fbfafda9db2f1d5faaebad0379aee2b4085932794fa3a592a07b0e8341e27a8366e314e71a422c7e85209bfce99d79a0000fca9b75a8ddc62013cb59acf6da5c7d4e6d0fc3abacac6259c1f91051681dc2a94ee0cea691498fb6c4a2aab9f1a92981475392b773c782696581e7812ee08273b9e4adc814f7eb755002f887ced9d61cb9be8bf9f088ba28326f300398f01ff000259c"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1f}, {0x8, 0x0, 0x64bd}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x6fbf}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fffffff}, {0x8}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0xfffffc00}]}]}, 0x2564}, 0x1, 0x0, 0x0, 0x40}, 0x40080d1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x4a280, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x510, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) (async) 00:30:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f0000000080)=0x5, 0x7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:00 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram2', 0x14000, 0x88) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) copy_file_range(r4, 0x0, r3, &(0x7f0000000080)=0x5, 0x7, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram2', 0x14000, 0x88) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) 00:30:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) copy_file_range(r4, 0x0, r3, &(0x7f0000000080)=0x5, 0x7, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:00 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) close(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/ram2', 0x14000, 0x88) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) 00:30:00 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x4f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1, 0x1, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0xa}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:00 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200202) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil}) 00:30:00 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1, 0x1, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0xa}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x50, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:00 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200202) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) (rerun: 64) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1, 0x1, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0xa}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) (async) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/67, 0x43}], 0x1, 0x1, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0xa}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x51, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200202) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000240)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil}) 00:30:01 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x52, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x20, 0x81, 0xfc, 0x4, 0xfd, 0x1, 0x2400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005080}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x403], &(0x7f0000000080)=[0x0], 0x1, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x53, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x20, 0x81, 0xfc, 0x4, 0xfd, 0x1, 0x2400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005080}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x54, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x2, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x55, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x42, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x20, 0x81, 0xfc, 0x4, 0xfd, 0x1, 0x2400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005080}, 0x8000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x2, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x56, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x2, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x2, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:30:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="01000039c676279e9aa2b9c7962c499e2d00d90ca1d855d4da16", @ANYRES32=r2, @ANYBLOB="00000000040000002e2f66696c653000f938b093658b19b4fe49dd871eb4fafea364b2d89274c4f9352cdbf3ff01a9d1e53372d4fc9a14fe17c1660e900f31f2130033cba5b03cb1ddba9fb1e13f5ad935b7ada901effe18a438120fcdb5cbf698c7c219e20d4be7b458587bdddf69e48ebd130245eb01ed2881acd8dbef0b58766f31876389b9d3a936be7ca2a32df5a427f42dfcfb054b30f696ae9e16feb4a76ba380e326a7ead34cf1b9da8cfaefa5ea8fea30e7f1f0fee95179fcc393cc57817feb7e262aa6585e01f31b3d2c9da0"]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000080)) lseek(r2, 0x1, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x57, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x5, 0x2dfe, 0xf62d, 0x1, 0x7ff], 0x5, 0x8d7, 0x73, 0xffffffff, 0xa0, 0x8000, 0xe80, {0xbb, 0x3, 0x1, 0x2, 0x5, 0x5, 0x8001, 0x80, 0x9, 0x101, 0x5b, 0x0, 0x8, 0x9, "5b06e04239baac70b7d0a7f41310033cfdda7a509f0055aabb352933b7e31dac"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="01000039c676279e9aa2b9c7962c499e2d00d90ca1d855d4da16", @ANYRES32=r2, @ANYBLOB="00000000040000002e2f66696c653000f938b093658b19b4fe49dd871eb4fafea364b2d89274c4f9352cdbf3ff01a9d1e53372d4fc9a14fe17c1660e900f31f2130033cba5b03cb1ddba9fb1e13f5ad935b7ada901effe18a438120fcdb5cbf698c7c219e20d4be7b458587bdddf69e48ebd130245eb01ed2881acd8dbef0b58766f31876389b9d3a936be7ca2a32df5a427f42dfcfb054b30f696ae9e16feb4a76ba380e326a7ead34cf1b9da8cfaefa5ea8fea30e7f1f0fee95179fcc393cc57817feb7e262aa6585e01f31b3d2c9da0"]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000080)) lseek(r2, 0x1, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000140)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="01000039c676279e9aa2b9c7962c499e2d00d90ca1d855d4da16", @ANYRES32=r2, @ANYBLOB="00000000040000002e2f66696c653000f938b093658b19b4fe49dd871eb4fafea364b2d89274c4f9352cdbf3ff01a9d1e53372d4fc9a14fe17c1660e900f31f2130033cba5b03cb1ddba9fb1e13f5ad935b7ada901effe18a438120fcdb5cbf698c7c219e20d4be7b458587bdddf69e48ebd130245eb01ed2881acd8dbef0b58766f31876389b9d3a936be7ca2a32df5a427f42dfcfb054b30f696ae9e16feb4a76ba380e326a7ead34cf1b9da8cfaefa5ea8fea30e7f1f0fee95179fcc393cc57817feb7e262aa6585e01f31b3d2c9da0"]) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000080)) (async) lseek(r2, 0x1, 0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:30:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x58, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x5, 0x2dfe, 0xf62d, 0x1, 0x7ff], 0x5, 0x8d7, 0x73, 0xffffffff, 0xa0, 0x8000, 0xe80, {0xbb, 0x3, 0x1, 0x2, 0x5, 0x5, 0x8001, 0x80, 0x9, 0x101, 0x5b, 0x0, 0x8, 0x9, "5b06e04239baac70b7d0a7f41310033cfdda7a509f0055aabb352933b7e31dac"}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffff4f, 0xbbbbbbbb}) 00:30:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="01000039c676279e9aa2b9c7962c499e2d00d90ca1d855d4da16", @ANYRES32=r2, @ANYBLOB="00000000040000002e2f66696c653000f938b093658b19b4fe49dd871eb4fafea364b2d89274c4f9352cdbf3ff01a9d1e53372d4fc9a14fe17c1660e900f31f2130033cba5b03cb1ddba9fb1e13f5ad935b7ada901effe18a438120fcdb5cbf698c7c219e20d4be7b458587bdddf69e48ebd130245eb01ed2881acd8dbef0b58766f31876389b9d3a936be7ca2a32df5a427f42dfcfb054b30f696ae9e16feb4a76ba380e326a7ead34cf1b9da8cfaefa5ea8fea30e7f1f0fee95179fcc393cc57817feb7e262aa6585e01f31b3d2c9da0"]) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000080)) (async) lseek(r2, 0x1, 0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x5, 0x2dfe, 0xf62d, 0x1, 0x7ff], 0x5, 0x8d7, 0x73, 0xffffffff, 0xa0, 0x8000, 0xe80, {0xbb, 0x3, 0x1, 0x2, 0x5, 0x5, 0x8001, 0x80, 0x9, 0x101, 0x5b, 0x0, 0x8, 0x9, "5b06e04239baac70b7d0a7f41310033cfdda7a509f0055aabb352933b7e31dac"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x59, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xbbbbbbbb}) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xf2, 0x3, 0x44}) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2200) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x6, "c693739b7d5d252fcd07505143cdb58834b3af8a3c5fd2e8c5828ae058de876d", 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') dup(r0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/229, 0xe5}], 0xf, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil}) lseek(r2, 0x20, 0x4) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={0x0, 0x0}) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xf2, 0x3, 0x44}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xf2, 0x3, 0x44}) (async) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xf2, 0x3, 0x44}) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2200) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x6, "c693739b7d5d252fcd07505143cdb58834b3af8a3c5fd2e8c5828ae058de876d", 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') dup(r0) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/229, 0xe5}], 0xf, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil}) lseek(r2, 0x20, 0x4) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2200) (async) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x6, "c693739b7d5d252fcd07505143cdb58834b3af8a3c5fd2e8c5828ae058de876d", 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) dup(r0) (async) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/229, 0xe5}], 0xf, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil}) (async) lseek(r2, 0x20, 0x4) (async) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) preadv(r3, &(0x7f0000000940), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000000)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r6}) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2200) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x6, "c693739b7d5d252fcd07505143cdb58834b3af8a3c5fd2e8c5828ae058de876d", 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (rerun: 32) dup(r0) (async, rerun: 32) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/229, 0xe5}], 0xf, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil}) lseek(r2, 0x20, 0x4) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) (async) preadv(r3, &(0x7f0000000940), 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000000)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x5f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x91f1, 0x1f, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) preadv(r3, &(0x7f0000000940), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000000)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) (async) preadv(r3, &(0x7f0000000940), 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000000)=0x5) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x60, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r4}) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x91f1, 0x1f, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x61, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0xffff7fff, 0x1], 0x2, 0x994, 0x16, 0x8, 0xfffffffa, 0xe6, 0x9, {0x77771f52, 0x8, 0x8, 0x7f, 0x100, 0x9, 0x26a, 0x0, 0xffff, 0x200, 0x9, 0x100000, 0x3, 0x0, "efd692e5a0c2bbc825928c2b4ae952b25feb1145d107ab86bcbb78fc77035027"}}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x91f1, 0x1f, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x91f1, 0x1f, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) (async) 00:30:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x62, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0xffff7fff, 0x1], 0x2, 0x994, 0x16, 0x8, 0xfffffffa, 0xe6, 0x9, {0x77771f52, 0x8, 0x8, 0x7f, 0x100, 0x9, 0x26a, 0x0, 0xffff, 0x200, 0x9, 0x100000, 0x3, 0x0, "efd692e5a0c2bbc825928c2b4ae952b25feb1145d107ab86bcbb78fc77035027"}}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r3}) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc271, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x63, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0xffff7fff, 0x1], 0x2, 0x994, 0x16, 0x8, 0xfffffffa, 0xe6, 0x9, {0x77771f52, 0x8, 0x8, 0x7f, 0x100, 0x9, 0x26a, 0x0, 0xffff, 0x200, 0x9, 0x100000, 0x3, 0x0, "efd692e5a0c2bbc825928c2b4ae952b25feb1145d107ab86bcbb78fc77035027"}}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x140) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0xffff7fff, 0x1], 0x2, 0x994, 0x16, 0x8, 0xfffffffa, 0xe6, 0x9, {0x77771f52, 0x8, 0x8, 0x7f, 0x100, 0x9, 0x26a, 0x0, 0xffff, 0x200, 0x9, 0x100000, 0x3, 0x0, "efd692e5a0c2bbc825928c2b4ae952b25feb1145d107ab86bcbb78fc77035027"}}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x64, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc271, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\r\x00', 0x0, 0x3a, 0x0, @loopback, @dev, [], "23e96155d1c0b7ac"}}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@nfc, 0x80, 0x0}, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0xc271, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\r\x00', 0x0, 0x3a, 0x0, @loopback, @dev, [], "23e96155d1c0b7ac"}}}}}}}, 0x0) (rerun: 64) recvmsg(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@nfc, 0x80, 0x0}, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x65, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x66, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x67, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) (async) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x68, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\r\x00', 0x0, 0x3a, 0x0, @loopback, @dev, [], "23e96155d1c0b7ac"}}}}}}}, 0x0) (async, rerun: 64) recvmsg(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@nfc, 0x80, 0x0}, 0x2000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x69, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:03 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x5}, 0x100, './file0\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) 00:30:04 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x5}, 0x100, './file0\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x5}, 0x100, './file0\x00'}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) (async) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:04 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x5}, 0x100, './file0\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x2, 0x5}, 0x100, './file0\x00'}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0) (async) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0xba, 0x1, 0x6c}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x7fff, 0x7fffffff}) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0xba, 0x1, 0x6c}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x7fff, 0x7fffffff}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0xba, 0x1, 0x6c}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x7fff, 0x7fffffff}) (async) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x1, 0xe5, &(0x7f0000000000)=""/229}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000102011c000000000010000000000000cc819c801b410ecf423e85c8317ccd0ac655ac63512f56f880a4f0de0248672884c716daf340e6f51342d780cdf57e6efd47a2bcfadc1d066ea6cf9fa0dd93d23c1a906adcc5647dba287ee4c1dcc5b4416167d8de5bf50ccf22c71441f828c023943a1bd8a8c2d9adbd5627b844c761ced6a391e76e4ead"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000500)=[0x1, 0x101], 0x2, 0x3, 0x0, 0x9, 0x1, 0x9, 0x7ff, {0xffffffff, 0x35e4, 0x1f, 0x9, 0x6f, 0x800, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x8, "e7736bbf1ed49677ed4a9f2549edb40d090fb6def7efd06514663a033062c9e9"}}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000540)={&(0x7f00000004c0)=[r2, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x80000001, 0x4, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000480)={&(0x7f0000000140)=[r2], &(0x7f00000001c0)=[0x2, 0x0, 0x0, 0x190bd69e], 0x1}) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x161801, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_setup(0x100, &(0x7f0000000600)=0x0) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000001380)="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", 0x1000, 0x6}, &(0x7f0000000680)) io_submit(r4, 0x1, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r4, 0x0, &(0x7f0000000500)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:04 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0xba, 0x1, 0x6c}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x7fff, 0x7fffffff}) 00:30:04 executing program 4: r0 = syz_open_dev$dri(0x0, 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x1, 0xe5, &(0x7f0000000000)=""/229}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000102011c000000000010000000000000cc819c801b410ecf423e85c8317ccd0ac655ac63512f56f880a4f0de0248672884c716daf340e6f51342d780cdf57e6efd47a2bcfadc1d066ea6cf9fa0dd93d23c1a906adcc5647dba287ee4c1dcc5b4416167d8de5bf50ccf22c71441f828c023943a1bd8a8c2d9adbd5627b844c761ced6a391e76e4ead"], 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000500)=[0x1, 0x101], 0x2, 0x3, 0x0, 0x9, 0x1, 0x9, 0x7ff, {0xffffffff, 0x35e4, 0x1f, 0x9, 0x6f, 0x800, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x8, "e7736bbf1ed49677ed4a9f2549edb40d090fb6def7efd06514663a033062c9e9"}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000540)={&(0x7f00000004c0)=[r2, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x80000001, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000480)={&(0x7f0000000140)=[r2], &(0x7f00000001c0)=[0x2, 0x0, 0x0, 0x190bd69e], 0x1}) (async) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x161801, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_setup(0x100, &(0x7f0000000600)=0x0) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000001380)="cfda28e8698287155003fee240143b0716a205f25cc3056d028d099363ec1dc1dd3d4da434fd1865e708f5b194d08813e0db8af87e5cee269ac88a2a11d6b437e93f42738e2efb922600130294bb9c9c8c20f769588c68fbdf9ea125089e55d5d27e3926e942fe12a24bfc0e60edbcea5f68b8219a2bc208779f9edddd454b62d693fca8de1122a548a044c8f9ebd2ac9fd23bee7973978006bc8870c878ea699559c7236fc0476afb1b846fd791100c529721533c4d745da5ceea6fb9f169e5174d85cd744b84015c6c0033ce0cff06ec762e0141942f30bdd4985fbe53194800e9bc897c07a3cfae7eb098cf5abab1ea3934e7fcd0baae82ace91c25c5b5b36cf25ce56ea810f3ac916b83acb5305d2e27b19fffd237298f98b51abaa6ae82b0f4a51c83d6a80264dc7cc30ca0da7d88ee5c0d995a19d8c651ccb317937bc527b6ac663ac08d53658429a335e8d2a2bda5c21aa3804d73f3f1b6bb0b4425fe02384903fb844ade427ff10828c3368f4d02f3f9ca1adc5443231333db0c91706e08146c6dadb96c1fa62e855148046a366d0ae9f27e376b93fdad4dd7b0caca9c70385055b376c8e3cfa59b6b92775c7af9e97125085d0f0d09030f830ecfdd8def173d944b1db69b2a961cec87fb303bc3b1d7fcca4404a64c4a037c353584cd02512241278a4373955465553dc2178fa3a6b6659a0d12757d1e5075632cf7cb7aa410ad614e75d70191aaf8ea79f715d3ca3a4163b5df1573a5ad7bd47653f168438948c1ace5e7e6bf7d7c887c51149763f3ca33a2797a1d207bfe7676b738250a6bd47c4a577c1ff4453ffdf6d9284b3ca4994c591882e77d12465c34a27ce68e2c9d2b969e76f2d4f6cf464b3ba1072ba5c701f24d6c4c1254f5468413cc9ba627f7e37fc45c38d4a803631f714bf80193c95cd35435a9d1405c0580eda979e19918ee105d6ba6004209744c56ea93da90dcbdaf566684f4ae39c0674adab420d2b4231aff5a091763fd3ff92e454511b168575394563a08746137e9d2c3376b8fe81e708ca4ea1444ee4fe2d55609f1ca95d9a890fffb061cdd40a6577157c61577ad04092dfaedf5e1856f7f8eeccee05e22bef343c1704b9b61d090449aa13e86c565114c16a774ba7bda62ca2069841e78f269b97f457ed195d17d3ad020e0fb6d0350f82bb5f0d6b92760f16d0c073b8f2acd04653b190af4b162cc8530aa4daa3f05aaed6a29c776b962ca2d858dfed45525362c0c8f9c7dc9fb304624af7c6f045629e8101ff5cfc40d0228a83f8110bc451528eceb3b7f294728f75f3b5357af38d85f4c06282fa83d936c9484196661034f22610b862e734e8f3496d515269cf2d5578d1d71704fb54ccdaeebec90785d236e3df2708eaf68375ab27f5f22c3723b85c059bd66a2203fce215d0e1f8a03895238ecf4b9197e458e59477e0ca18b60a59771af559c21515ac9ec1dd4bc1112300a7004b162fd6fa52a622b7bd85a1edade5cd397920b53f6729e09cac90b5d961923aaefffa8651b42abaca9bb66ff0de49bbb93ac6120e087867a087f78ce167c2b5402b0f3db957eba69890401ce9610340384ecc63696c0710e02895578509be6fe3dcaabcb0db7ce4faaba3c0bf6aa891719cfdd93943aeee21ee87e744a640f966b87fc320d937dbbcc683865096e2be931595192649cf888ac703120567193625dd12423219831afaf05d8f524183152d26a1556bada5dd70773083ee8ac8263f6831c50f3f5a5ce6c54d496f71740558f00fb6138ed7cdb3277f81c0cc51c5f3d544c9921673a4c1e7df5a98a954160410f0411201f35052d6208105453d032169f76d5722c7d1038d4171b299407b0fedfa843805792ba7f102f94264e4094bd6a5543bf865abd7a576ef672db08728cc455b157e6d8845539bb62052ac1db61eb1eb8e7f6ff337e11ac73bb0c5eb1c4823edfa976dcdc287c47c33fe1ac96d4143061d8d546367313d66b20c45561d9a094cc3592d646411473bc51747b1ee9960aaeb474355ce56ee1aa2a3a3ac8becc78693f15cf0ce69a6d9ea12378209b9425d6c30fe9a2c7b21a1f8b80390a1cc09b52a9af960604d43c0502b4b5af1cce9b5b7b6956cddb5e9df14f08a25127038644f93377b68ab16afc82e352c07fd728f3c07441d38b6b50576913ee4b077be7b82ea580a1ae22cd180b961b70d4909e38a8f5345ca11f38609d71c54081cbec44835d190e8895f886581b049660661703f5ffb7b57df14bb454800ba636ddaa23651d947a477de1c02f5fcfc18c0a0ae40a9f64e426e19960f976d91777823d7882d414d4f09024dd7e2c110f14c1f1e40a0ca258b5829b22a29bb44328e06826d376df11007f716d85446f44608106b00ee03e7f01a81380a0ec2f0fcb4ab7ea363bee3edb5e3cf826568f3d78b1a70ee7f97e5911e86803aed527fd0c62cbbc96341eeb2c1d2b6bbb717e77d4c88ba90a77fe41c041e032af8bccce7efa612f95694b74b65ad2e7565e9e0dd8243693d877ef431fc317746badcd841ad0698d8fb9fced43bc8ca6c9fc764b1d2c9f08505f552fa68618f2303de8eedae9e7581206cd3cd0aa5e210d20d5bcc49d1cdf39292b85625d2bf09d997194965cc750f071dbe92c760d587a70e049fa8277cb8a9f69b2f83c276b5570c010d0901c2a0440a492472ef1eeb4caa8efb6ee58afa400e44ca908ab4d7286dd0fefbc04723c9cc62168e416c171e23071ad7e2328ac2e3359686e76e4488db7fb09b6325e97e76493b9bc0a19ab62c791fae9039fe1356f6d5088d2f804840753bfb7915185c4d6a7d659aba7e55b6bfb123dc3a391dd6b91ff02894b3011d358176994c03be1be405533fd32a62baab56588a816a3cbc630e39704fd2291275cd9518d75a8a883d5de8c61b897e4ce69193fa72c9d785bc49f5edc17260206930bb97f49b8e6655a04e28c1aa6e6ec04bc754562c269d3a89a6d9bae29af72fdbf4ae21513b1dfb637cd59aed4ef59f06bbf4f88c4314566557cce776b68bce7c5e23ba5710b4017d5c655330171e194a06fc8c420399c46b17f8f8f5f790a2abba332dc0cbd0e6de2a18e0369771c3d7506bffa71f3514413b3996a427c89674f58a2884541a97ad7492fa543174e4305139b3dfdfccb8b75521d039084793f1438618573f6095ffd7466502415931b14b19b9b5d281c8b29717b4d439a9f94db7a64971971ee6c1170700e8f9f5633da1e1aa3a17a60bfe869b49e1ed63a75ff1d73de519209a28f1f8f2b53b1ce9f0e8160756f270195bd4690108dbfe1dacbe4fb3d61bb6488e1cac99889a57adb5b976289c1b627259ce4143ca672b56bfe1ea5dbcc0ddd89026d54f20dc7bc4b21f5debb8c02f5fe794e42c55ba17473c1d54cdf41c11f8823e1239873e1b3d91464eb8b04c73ae69eedb98570ea5fbb7e87c8dbcaed756cf010a19cb03535cfc8d8836c05384371ca0d912b9cda0cb3993d57b06c4ddd7ebb210b13db22c684eac7232d28aef4a2b7ffb4841603281fd3213d9f7da28e13ba6640d1cd3874302d6de706865842b267a9c1d9d6012583d71923d838244984703f32ec30740c4d13ffa211c54dcb56da8854b89b469b5fea0c7cb18a060e197cf2825f00e668355f02bc5514c0ff592a611894af5a048e569fd2e53945ced7ee69ee756bf9baf3178f888d1acd4d638b6a16faa95cfe9245f0579e6a7ff67d589917bb6851271af4a73448a6923ec021076a76833424969cae6b876310d8d38ada06daa92a0a8db36802e9579d85bfe6fff94a9b7974bf9393aea3716a213ec92a085f6c5dee1c31c3ea8a449d950fda8cbeca4c2232f51aabed961de5ee7a3f24bb651bf6cb7872e9c61be2b1b332fb8a98777b970a8b66256c943868c5c9680c32b6f6f797c98e9ce65dd919e8409349f6a04bd8632fd36049f4c494c52453f5ad2a50f33f9a89971495cb89685d3809aa7569b9db5ba5b588e8526ec7a3a00a2e98d0e98aa07285497aad5691836c99f512e37a257c6ec188304b1d20fdce91b13caa4376193ff23a300e55d1f74869b7320f0b8e966e7b26a2ff09395ed3fb79a599ff90d8b05f93f918cb3fdee60c373592a2c72737688686dab034cde0b132be2752d33217fd23dbae64a695191aeb93998a04d672afa564a4bc26668ab09783f01555d056f61d6f59998fbd23de66afd221c9ed3ad69eb6982227987d2e7fcb92096d53ebf8667a9912e367c881e91707906a8c4dbec808dc0139d6141e220c592f711ef051b0715b724f63b62192a3a056b316515778b04a4e86d95134e6a6d680a82c0756cc4f2c08068f32e5214a055da6d9d8e04880e2a908247f441c8597303ec622c8e2b09646107ea2558f449bf8095ec2b025c71c3c6a4beaad6ac34b57aa53e955c80e888ed087a68f6b883ecfc64e3363ca725457d941377b56e7a61b58a196108debefca5f14e728b414ec345e7ae52d111eff26e5bbd1696c381cfad8262af4bd9a46da0a5f2ff845e2192ce12ad2eae35c207d3b94fe0890578d547e1c65fb3dc031f11fb1d1a0aa41e0eea79ac0ae9488ef5017e8573a99ce00fa3cbd956f1f4449d7e348a0e8a50200b69f0a025780c98b71e56e42ce5b9241121d1ef550a820a662c020d60e69bd86ceee04b19ef522db7db1198ebe81fe018f72e4d93be1bd4ee05e60660ffe32c90876c2d7f5edea341a8245b4ee4b3d41d1d518c39efc2a3296dc03ae17bb981da1bca4eb8f5d1a195c0f798bd50b853b33c297faa80dfee1057dfd95e04eb59baf877eb3334a8ca34eb3247d54babb7b7e6a50e547f896fcbdb5114ae1f0c0a18277fd561ef9df5ab76dff1f15c184fe76d5d1002fa8bf7590aa5155c77c4fb2417746e7b22409b766d7d8f1e035ef268f45211c0d1af1b1f17484feb63a9f621bebec988c9d3cc96b50f3ad4a46444070c658f954a7ad532e2ffdf58e702b71c72274261bf5faf57ea4c3f9d2a6cc55d3e9b70825322e2e3106ff892d62f41d46e890cd9bb44dddccc84ad06e9159d3db9e44face0e4fbc6a3bd5f7f56d5420ca7dadbb77f279df7579db8fe5db903b365c61bb3d7086fd18824ac69d0552cdab5d23d78ca6d92b6c6cf022d02314c78ec0acf69c00b98d69c0c69b1d79acdcee4913ee7359584c67dfce317b87243643db8fd580837695aadee5099f9ec019215842312dc8da4005e13455676788f0df4899c639cf8f266b361055ae595c7d07d5988125f6c5fbdfdb94febf8ac7a75c95619cafc1ad9887ee7e685c6874bfeddd7884e7806f498b33acff559de1bbbabc81fd25778d062980371c615f33799eebac850a72a6d338ea016761c78c264aed4c68e3b53bd4ffddd4bc3fb5c0f936febca1eb8252ab6ac605081984ef489b634e8b0a5be53ffc7e9aeb7aaf71477a755ff28e57fe9fd353921090c46e4f5c88121ddabc3c50c2be19c334e8db47db415eb93b07fcf7e386c41922304764ebc953737fad4c3bec8c43ff8b8eaae3b593714bebbedb363e824e851d1c7a3b4fd3234fd030a739abc846dd30ae502cac06b285c26ab79117ef92d355dcdf91ee391be12e58fa701c08904c11ff842aac8434282353e9eb36e4c1e5603395903f9fcf418f23d7ca78dc70744d7525762fdb4895e63c65fb4bac6cd22218e4f2293ec3c07c7e7d2cfe9c7d8ef0153f6432b813a0f605d24574299f4ddde65da94f70ebdb2dc9e8367e8a3fc8e3b179ce9d91d5ff8ded6da2acd7ceb4f12fdc4f3e581bc9bcdc", 0x1000, 0x6}, &(0x7f0000000680)) (async) io_submit(r4, 0x1, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) io_submit(r4, 0x0, &(0x7f0000000500)) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x70, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(0x0, 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x71, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x1, 0xe5, &(0x7f0000000000)=""/229}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000102011c000000000010000000000000cc819c801b410ecf423e85c8317ccd0ac655ac63512f56f880a4f0de0248672884c716daf340e6f51342d780cdf57e6efd47a2bcfadc1d066ea6cf9fa0dd93d23c1a906adcc5647dba287ee4c1dcc5b4416167d8de5bf50ccf22c71441f828c023943a1bd8a8c2d9adbd5627b844c761ced6a391e76e4ead"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000500)=[0x1, 0x101], 0x2, 0x3, 0x0, 0x9, 0x1, 0x9, 0x7ff, {0xffffffff, 0x35e4, 0x1f, 0x9, 0x6f, 0x800, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x8, "e7736bbf1ed49677ed4a9f2549edb40d090fb6def7efd06514663a033062c9e9"}}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000540)={&(0x7f00000004c0)=[r2, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x80000001, 0x4, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000480)={&(0x7f0000000140)=[r2], &(0x7f00000001c0)=[0x2, 0x0, 0x0, 0x190bd69e], 0x1}) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x161801, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_setup(0x100, &(0x7f0000000600)=0x0) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000001380)="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", 0x1000, 0x6}, &(0x7f0000000680)) io_submit(r4, 0x1, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r4, 0x0, &(0x7f0000000500)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x1, 0xe5, &(0x7f0000000000)=""/229}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000102011c000000000010000000000000cc819c801b410ecf423e85c8317ccd0ac655ac63512f56f880a4f0de0248672884c716daf340e6f51342d780cdf57e6efd47a2bcfadc1d066ea6cf9fa0dd93d23c1a906adcc5647dba287ee4c1dcc5b4416167d8de5bf50ccf22c71441f828c023943a1bd8a8c2d9adbd5627b844c761ced6a391e76e4ead"], 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000500)=[0x1, 0x101], 0x2, 0x3, 0x0, 0x9, 0x1, 0x9, 0x7ff, {0xffffffff, 0x35e4, 0x1f, 0x9, 0x6f, 0x800, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x8, "e7736bbf1ed49677ed4a9f2549edb40d090fb6def7efd06514663a033062c9e9"}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000540)={&(0x7f00000004c0)=[r2, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x80000001, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000480)={&(0x7f0000000140)=[r2], &(0x7f00000001c0)=[0x2, 0x0, 0x0, 0x190bd69e], 0x1}) (async) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x161801, 0x0) (async) io_setup(0x7, &(0x7f0000000080)) (async) io_setup(0x100, &(0x7f0000000600)) (async) io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000001380)="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", 0x1000, 0x6}, &(0x7f0000000680)) (async) io_submit(r4, 0x1, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) io_submit(r4, 0x0, &(0x7f0000000500)) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x72, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x73, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRESOCT=r3], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r7, @ANYRESOCT=r6], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x2, r1}, {0x2, 0x6, 0xee01}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r2}, {0x8, 0x6, r4}, {0x8, 0x5, r5}, {0x8, 0x3, r7}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1, 0x5, {}, {r1}, 0x1f, 0x7}) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) r1 = getuid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRESOCT=r3], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) (async) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r7, @ANYRESOCT=r6], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x2, r1}, {0x2, 0x6, 0xee01}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r2}, {0x8, 0x6, r4}, {0x8, 0x5, r5}, {0x8, 0x3, r7}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1, 0x5, {}, {r1}, 0x1f, 0x7}) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(0x0, 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async, rerun: 32) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) (rerun: 32) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRESOCT=r3], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x98}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/158, 0x9e}], 0x6, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/213, 0xd5}, {&(0x7f0000001480)=""/196, 0xc4}], 0x5, &(0x7f0000001600)}}], 0x3, 0x40002000, &(0x7f0000000900)) mount(&(0x7f0000000140)=ANY=[@ANYRES8=r7, @ANYRESOCT=r6], &(0x7f0000000700)='./file0\x00', 0x0, 0x90c2, 0x0) (async, rerun: 32) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x2, r1}, {0x2, 0x6, 0xee01}], {}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r2}, {0x8, 0x6, r4}, {0x8, 0x5, r5}, {0x8, 0x3, r7}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1, 0x5, {}, {r1}, 0x1f, 0x7}) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x76, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(0x0, 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000001c0)=[0x2000, 0x6, 0xfe18], 0x3, 0xffff8000, 0x0, 0xffff0000, 0x29, 0x7, 0xfffffe01, {0x1, 0x3, 0x401, 0x7, 0x6, 0x9901, 0x707b, 0x1, 0x2, 0x0, 0x6, 0x1, 0x6, 0x200, "ff8582d106be887ef9270f76427c23fa0e0e6aaf54dcf479cf9b16cb683a10ee"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000002c0)=0x65ba) 00:30:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(0x0, 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000)=[0x8, 0x1ff, 0x6, 0x80000000, 0x0, 0x5, 0x3, 0xfffffffb, 0x9aa, 0xfffffffe], 0xa, 0x1, 0x100, 0x4, 0x3ff, 0x7f, 0x48e, {0xf30c, 0xd5f6, 0x1, 0x8, 0x3ff, 0x48, 0x6, 0x8, 0xdcf, 0x100, 0x4, 0x8, 0x1, 0x3, "e670d4993fe5ab7571a109261e2d2d4f227a99a65387aa8ed2e7880607346cca"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000080, 0xc26d, 0x7d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x80000001, 0x2, 0x5, 0x100, 0x101, 0x7, 0xa7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r7}) 00:30:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000001c0)=[0x2000, 0x6, 0xfe18], 0x3, 0xffff8000, 0x0, 0xffff0000, 0x29, 0x7, 0xfffffe01, {0x1, 0x3, 0x401, 0x7, 0x6, 0x9901, 0x707b, 0x1, 0x2, 0x0, 0x6, 0x1, 0x6, 0x200, "ff8582d106be887ef9270f76427c23fa0e0e6aaf54dcf479cf9b16cb683a10ee"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000002c0)=0x65ba) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x78, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x80, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000)=[0x8, 0x1ff, 0x6, 0x80000000, 0x0, 0x5, 0x3, 0xfffffffb, 0x9aa, 0xfffffffe], 0xa, 0x1, 0x100, 0x4, 0x3ff, 0x7f, 0x48e, {0xf30c, 0xd5f6, 0x1, 0x8, 0x3ff, 0x48, 0x6, 0x8, 0xdcf, 0x100, 0x4, 0x8, 0x1, 0x3, "e670d4993fe5ab7571a109261e2d2d4f227a99a65387aa8ed2e7880607346cca"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000080, 0xc26d, 0x7d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x80000001, 0x2, 0x5, 0x100, 0x101, 0x7, 0xa7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r7}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x80, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000)=[0x8, 0x1ff, 0x6, 0x80000000, 0x0, 0x5, 0x3, 0xfffffffb, 0x9aa, 0xfffffffe], 0xa, 0x1, 0x100, 0x4, 0x3ff, 0x7f, 0x48e, {0xf30c, 0xd5f6, 0x1, 0x8, 0x3ff, 0x48, 0x6, 0x8, 0xdcf, 0x100, 0x4, 0x8, 0x1, 0x3, "e670d4993fe5ab7571a109261e2d2d4f227a99a65387aa8ed2e7880607346cca"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000080, 0xc26d, 0x7d}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x80000001, 0x2, 0x5, 0x100, 0x101, 0x7, 0xa7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r7}) (async) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x79, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000001c0)=[0x2000, 0x6, 0xfe18], 0x3, 0xffff8000, 0x0, 0xffff0000, 0x29, 0x7, 0xfffffe01, {0x1, 0x3, 0x401, 0x7, 0x6, 0x9901, 0x707b, 0x1, 0x2, 0x0, 0x6, 0x1, 0x6, 0x200, "ff8582d106be887ef9270f76427c23fa0e0e6aaf54dcf479cf9b16cb683a10ee"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000002c0)=0x65ba) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x80, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000000)=[0x8, 0x1ff, 0x6, 0x80000000, 0x0, 0x5, 0x3, 0xfffffffb, 0x9aa, 0xfffffffe], 0xa, 0x1, 0x100, 0x4, 0x3ff, 0x7f, 0x48e, {0xf30c, 0xd5f6, 0x1, 0x8, 0x3ff, 0x48, 0x6, 0x8, 0xdcf, 0x100, 0x4, 0x8, 0x1, 0x3, "e670d4993fe5ab7571a109261e2d2d4f227a99a65387aa8ed2e7880607346cca"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x80000080, 0xc26d, 0x7d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (rerun: 64) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f00000001c0)={0x80000001, 0x2, 0x5, 0x100, 0x101, 0x7, 0xa7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r7}) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1a080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7b, 0x41, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x401, 0x5, 0x5], 0x4, 0x80800}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000200)) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:06 executing program 0: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7b, 0x41, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x401, 0x5, 0x5], 0x4, 0x80800}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7b, 0x41}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x401, 0x5, 0x5], 0x4, 0x80800}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000200)) (async) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:06 executing program 0: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x7e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7b, 0x41, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x401, 0x5, 0x5], 0x4, 0x80800}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7b, 0x41}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x401, 0x5, 0x5], 0x4, 0x80800}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000200)) (async) 00:30:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:06 executing program 0: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:06 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x82, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = signalfd(r0, &(0x7f0000000080)={[0xba]}, 0x8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x83, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) r2 = signalfd(r0, &(0x7f0000000080)={[0xba]}, 0x8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x84, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) (async) r2 = signalfd(r0, &(0x7f0000000080)={[0xba]}, 0x8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x85, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x490601) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x3, 0x80000001, 0x7ff, 0xe9, 0x10, 0x6}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x86, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x490601) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x3, 0x80000001, 0x7ff, 0xe9, 0x10, 0x6}) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x490601) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000080)={0x3, 0x80000001, 0x7ff, 0xe9, 0x10, 0x6}) 00:30:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={r2}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x88, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/74, 0x4a}], 0x2, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r4}) 00:30:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfffd, 0x3f, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x200, 0x6, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x7f, 0x5], 0x2, 0x1, 0x101, 0x1, 0x4, 0x7, 0x7f0, {0x3, 0x4, 0x100, 0xe6b9, 0x3ff, 0xfff, 0x4, 0x7fff, 0x4984, 0x4, 0xfff7, 0x7, 0xfff, 0xfffffffd, "f1fc1dccaccb9fb520ab751d54fb98e864cf15b01f753fcfe0352a6420259b03"}}) 00:30:07 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:07 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x89, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfffd, 0x3f, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x200, 0x6, 0x7fffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x7f, 0x5], 0x2, 0x1, 0x101, 0x1, 0x4, 0x7, 0x7f0, {0x3, 0x4, 0x100, 0xe6b9, 0x3ff, 0xfff, 0x4, 0x7fff, 0x4984, 0x4, 0xfff7, 0x7, 0xfff, 0xfffffffd, "f1fc1dccaccb9fb520ab751d54fb98e864cf15b01f753fcfe0352a6420259b03"}}) 00:30:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/74, 0x4a}], 0x2, 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r4}) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfffd, 0x3f, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x200, 0x6, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x7f, 0x5], 0x2, 0x1, 0x101, 0x1, 0x4, 0x7, 0x7f0, {0x3, 0x4, 0x100, 0xe6b9, 0x3ff, 0xfff, 0x4, 0x7fff, 0x4984, 0x4, 0xfff7, 0x7, 0xfff, 0xfffffffd, "f1fc1dccaccb9fb520ab751d54fb98e864cf15b01f753fcfe0352a6420259b03"}}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xfffd, 0x3f, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x200, 0x6, 0x7fffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000080)=[0x7f, 0x5], 0x2, 0x1, 0x101, 0x1, 0x4, 0x7, 0x7f0, {0x3, 0x4, 0x100, 0xe6b9, 0x3ff, 0xfff, 0x4, 0x7fff, 0x4984, 0x4, 0xfff7, 0x7, 0xfff, 0xfffffffd, "f1fc1dccaccb9fb520ab751d54fb98e864cf15b01f753fcfe0352a6420259b03"}}) (async) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/74, 0x4a}], 0x2, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/74, 0x4a}], 0x2, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r4}) (async) 00:30:08 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)={r1}) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xfa09bab29b4384e6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x7fff, 0x0, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xfa09bab29b4384e6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x7fff, 0x0, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:08 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x20) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:30:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xfa09bab29b4384e6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x7fff, 0x0, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0xfa09bab29b4384e6) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x7fff, 0x0, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x8f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 00:30:08 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x20) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x90, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:08 executing program 3: ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x11) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x23, 0x8, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0xc200002) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:30:08 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x91, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x2, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x8ad, 0x400, {r1}, {r4}, 0xea, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x9}) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:09 executing program 3: ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x11) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x23, 0x8, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0xc200002) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x11) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x23, 0x8, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0xc200002) (async) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x92, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x295, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)='k', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)) 00:30:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x2, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x8ad, 0x400, {r1}, {r4}, 0xea, 0x2}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x9}) 00:30:09 executing program 3: ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x11) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x23, 0x8, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0xc200002) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x93, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x94, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4000000093, 0x238e80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet(0x2, 0x2, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x8ad, 0x400, {r1}, {r4}, 0xea, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x9}) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x95, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4000000093, 0x238e80) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r7) 00:30:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x96, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4000000093, 0x238e80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4000000093, 0x238e80) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) 00:30:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") r7 = syz_open_procfs(r6, &(0x7f0000000240)='numa_maps\x00') preadv(r7, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:09 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x97, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async) fcntl$setown(r0, 0x8, r1) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x98, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x99, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r1}) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x9dd9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r1}) (async) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x9dd9) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) syz_clone(0x98001200, &(0x7f0000000280)="9408ae87b6d60d208ec41c", 0xb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d1f61d4afeddd15e9711e08db71c86f7498dc75b36af1f91685186f26f132d5c0765c257cb") preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x9, r1}) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x9dd9) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000004f32648203c850878ede0ff9b72225041687f373d1befe000000000000000000"]) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x2) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x537}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x6, 0x1}}, './file0\x00'}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "008e831556d263eac4364acbc49dd5255080834756cdffd76d0ab1423d6c8359f7e73effe603cc6f6df3ade665db3211def71350c8368cb0b02d165564d2313d8718ac2b631cae4d64fa67b49078d52d9f9d0be0f6259f51b70db4072d7450a785a9805b719d8650f4d21123563bb30e0f57"}, 0x76) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:10 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x2) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x537}}, './file0\x00'}) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x6, 0x1}}, './file0\x00'}) (async) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "008e831556d263eac4364acbc49dd5255080834756cdffd76d0ab1423d6c8359f7e73effe603cc6f6df3ade665db3211def71350c8368cb0b02d165564d2313d8718ac2b631cae4d64fa67b49078d52d9f9d0be0f6259f51b70db4072d7450a785a9805b719d8650f4d21123563bb30e0f57"}, 0x76) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x2) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x537}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x6, 0x1}}, './file0\x00'}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "008e831556d263eac4364acbc49dd5255080834756cdffd76d0ab1423d6c8359f7e73effe603cc6f6df3ade665db3211def71350c8368cb0b02d165564d2313d8718ac2b631cae4d64fa67b49078d52d9f9d0be0f6259f51b70db4072d7450a785a9805b719d8650f4d21123563bb30e0f57"}, 0x76) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) creat(&(0x7f00000001c0)='./file0\x00', 0x2) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x537}}, './file0\x00'}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x6, 0x1}}, './file0\x00'}) (async) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) (async) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "008e831556d263eac4364acbc49dd5255080834756cdffd76d0ab1423d6c8359f7e73effe603cc6f6df3ade665db3211def71350c8368cb0b02d165564d2313d8718ac2b631cae4d64fa67b49078d52d9f9d0be0f6259f51b70db4072d7450a785a9805b719d8650f4d21123563bb30e0f57"}, 0x76) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x9f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1f, 0x242003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7e, 0xc26d, 0x97e0}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1f, 0x242003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1f, 0x242003) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0x401, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) (rerun: 64) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xc0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7d, 0x7fffffff, 0x7e}) 00:30:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xc0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7d, 0x7fffffff, 0x7e}) 00:30:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="220ac1c57d072735ba70fdd36d953a6cb96bd1c1984254078578564e", 0x1c}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xc0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7d, 0x7fffffff, 0x7e}) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x4, r2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x68b50d963871a892, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {}, {0x8, 0x6, r5}], {0x10, 0x4}, {0x20, 0x7}}, 0x84, 0x2) 00:30:12 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x4, r2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x68b50d963871a892, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {}, {0x8, 0x6, r5}], {0x10, 0x4}, {0x20, 0x7}}, 0x84, 0x2) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresuid(0x0, r2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresuid(0x0, r4, 0x0) (async) getegid() (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x4, r2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x68b50d963871a892, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {}, {0x8, 0x6, r5}], {0x10, 0x4}, {0x20, 0x7}}, 0x84, 0x2) (async) 00:30:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) (async) r5 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x4, r2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x68b50d963871a892, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {}, {0x8, 0x6, r5}], {0x10, 0x4}, {0x20, 0x7}}, 0x84, 0x2) 00:30:12 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xa9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xaa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:12 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x5e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x80, 0x3f, 0x7e}) 00:30:12 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xab, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) fcntl$setpipe(r1, 0x407, 0x5e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x80, 0x3f, 0x7e}) 00:30:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106441, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r9, &(0x7f0000000940), 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0x7, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) close(r10) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xac, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:13 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) fcntl$setpipe(r1, 0x407, 0x5e) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x80, 0x3f, 0x7e}) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xad, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106441, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r9, &(0x7f0000000940), 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0x7, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) close(r10) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) close(r3) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r6}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106441, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r9, &(0x7f0000000940), 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0x7, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) (async) close(r10) (async) 00:30:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xae, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x1, 0x3ff, 0xffa, &(0x7f0000000240)=""/4090}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:30:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) close(r3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106441, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r9, &(0x7f0000000940), 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0x7, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) close(r10) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) close(r3) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00c642d, &(0x7f0000000100)={r5}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)={r6}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106441, &(0x7f0000000140)={r7}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={r7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r8}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r9, &(0x7f0000000940), 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0x7, 0x0, 0x0, 0x7}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) (async) close(r10) (async) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xaf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x1, 0x3ff, 0xffa, &(0x7f0000000240)=""/4090}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:30:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) 00:30:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x1, 0x3ff, 0xffa, &(0x7f0000000240)=""/4090}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 705.921670] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 705.921670] program syz-executor.3 not setting count and/or reply_len properly 00:30:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) (async) 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0, 0x0) 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 706.150748] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 706.150748] program syz-executor.3 not setting count and/or reply_len properly 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}], 0x2, 0x0, 0x0) 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) (async) 00:30:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x0) 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) [ 706.443121] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 706.443121] program syz-executor.3 not setting count and/or reply_len properly 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) 00:30:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x82401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121c00, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) 00:30:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x82401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121c00, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x82401) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121c00, 0x0) (async) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) 00:30:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) 00:30:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x82401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121c00, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x82401) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000001c0)={r1}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121c00, 0x0) (async) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) (async) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940), 0x0, 0x0, 0x0) 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x105440) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) write$binfmt_misc(r5, &(0x7f0000000240)={'syz1', "97503e87d185006703e4f851c7b80d731c616ff642594a2937f64f8ca2e17040648dbbdf4258ecf143feb66a7d6f80d305fb19d7f5076443766ee9e738050eadcd40c25e0adf8da248af568e4ab1c9799a3b1c4f2d885ed51024189592d2fffe5d4916961913555fb5a4c41efc531a6d8fbb8651672158f680c4dffb8fb01f6490bc08efc3acf233dde4881766d7d86b0df5d58e6200"}, 0x9a) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{0x0}], 0x1, 0x0, 0x0) 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x105440) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) write$binfmt_misc(r5, &(0x7f0000000240)={'syz1', "97503e87d185006703e4f851c7b80d731c616ff642594a2937f64f8ca2e17040648dbbdf4258ecf143feb66a7d6f80d305fb19d7f5076443766ee9e738050eadcd40c25e0adf8da248af568e4ab1c9799a3b1c4f2d885ed51024189592d2fffe5d4916961913555fb5a4c41efc531a6d8fbb8651672158f680c4dffb8fb01f6490bc08efc3acf233dde4881766d7d86b0df5d58e6200"}, 0x9a) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xb9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{0x0}], 0x1, 0x0, 0x0) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xba, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x105440) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) write$binfmt_misc(r5, &(0x7f0000000240)={'syz1', "97503e87d185006703e4f851c7b80d731c616ff642594a2937f64f8ca2e17040648dbbdf4258ecf143feb66a7d6f80d305fb19d7f5076443766ee9e738050eadcd40c25e0adf8da248af568e4ab1c9799a3b1c4f2d885ed51024189592d2fffe5d4916961913555fb5a4c41efc531a6d8fbb8651672158f680c4dffb8fb01f6490bc08efc3acf233dde4881766d7d86b0df5d58e6200"}, 0x9a) 00:30:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') preadv(r0, &(0x7f0000000940)=[{0x0}], 0x1, 0x0, 0x0) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xbb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x6, 0xfffffc00, 0x4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x6, 0xfffffc00, 0x4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:15 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xbc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 707.838089] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 707.838089] program syz-executor.4 not setting count and/or reply_len properly 00:30:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x6, 0xfffffc00, 0x4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xbd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) 00:30:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x6, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x200, 0x0, 0x9, 0xeeeeeeee}) [ 708.075803] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 708.075803] program syz-executor.4 not setting count and/or reply_len properly 00:30:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4}) 00:30:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xbe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x6, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x200, 0x0, 0x9, 0xeeeeeeee}) [ 708.320952] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 708.320952] program syz-executor.4 not setting count and/or reply_len properly 00:30:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xbf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x6, 0x1f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x3, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x200, 0x0, 0x9, 0xeeeeeeee}) (rerun: 32) 00:30:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) 00:30:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:16 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @local, 0x80000000}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7c, 0x826d, 0x407e}) [ 708.556444] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 708.556444] program syz-executor.4 not setting count and/or reply_len properly 00:30:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:16 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @local, 0x80000000}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7c, 0x826d, 0x407e}) 00:30:16 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 708.819384] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 708.819384] program syz-executor.4 not setting count and/or reply_len properly 00:30:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:17 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @local, 0x80000000}, 0x1c) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7c, 0x826d, 0x407e}) 00:30:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xae, 0xdf6f, 0x80000001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xae, 0xdf6f, 0x80000001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xae, 0xdf6f, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) 00:30:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xae, 0xdf6f, 0x80000001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) 00:30:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x14080, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x1f, 0xf0, 0x4, 0x7ff, 0xa0, 0x8000, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r6}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e}) [ 709.469220] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 709.469220] program syz-executor.4 not setting count and/or reply_len properly 00:30:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:17 executing program 3: getpid() r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x14080, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x1f, 0xf0, 0x4, 0x7ff, 0xa0, 0x8000, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x8, 0x6, 0x10000}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000100)={r6}) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x3f, 0x7e}) 00:30:17 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:17 executing program 3: getpid() r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) getpid() (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) [ 709.808196] sg_write: data in/out 8156/19 bytes for SCSI command 0xd2-- guessing data in; [ 709.808196] program syz-executor.4 not setting count and/or reply_len properly [ 709.827273] ================================================================== [ 709.834851] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x22c/0x240 [ 709.841879] Read of size 8 at addr ffff8880abb67d80 by task syz-executor.0/4894 [ 709.849321] [ 709.850962] CPU: 1 PID: 4894 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 709.858758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 709.868114] Call Trace: [ 709.870713] dump_stack+0x1fc/0x2ef [ 709.874351] print_address_description.cold+0x54/0x219 [ 709.879638] kasan_report_error.cold+0x8a/0x1b9 [ 709.884311] ? vgem_gem_dumb_create+0x22c/0x240 [ 709.888986] __asan_report_load8_noabort+0x88/0x90 [ 709.894010] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 709.899207] ? vgem_gem_dumb_create+0x22c/0x240 [ 709.903883] vgem_gem_dumb_create+0x22c/0x240 [ 709.908388] drm_mode_create_dumb+0x27c/0x300 [ 709.912900] drm_ioctl_kernel+0x208/0x2a0 [ 709.917061] ? drm_mode_create_dumb+0x300/0x300 [ 709.921738] ? drm_ioctl_permit+0x210/0x210 [ 709.926073] ? __might_fault+0x192/0x1d0 [ 709.930144] drm_ioctl+0x5a0/0x9e0 [ 709.933695] ? drm_mode_create_dumb+0x300/0x300 [ 709.938368] ? drm_getstats+0x20/0x20 [ 709.942176] ? perf_trace_lock_acquire+0x530/0x530 [ 709.947165] ? perf_trace_lock_acquire+0x530/0x530 [ 709.952110] ? futex_exit_release+0x220/0x220 [ 709.956619] ? lock_acquire+0x170/0x3c0 [ 709.960612] ? debug_check_no_obj_freed+0xb5/0x490 [ 709.965551] ? drm_getstats+0x20/0x20 [ 709.969360] do_vfs_ioctl+0xcdb/0x12e0 [ 709.973255] ? lock_downgrade+0x720/0x720 [ 709.977415] ? check_preemption_disabled+0x41/0x280 [ 709.982440] ? ioctl_preallocate+0x200/0x200 [ 709.986869] ? __fget+0x356/0x510 [ 709.990340] ? do_dup2+0x450/0x450 [ 709.993899] ? __se_sys_futex+0x298/0x3b0 [ 709.998069] ksys_ioctl+0x9b/0xc0 [ 710.001529] __x64_sys_ioctl+0x6f/0xb0 [ 710.005426] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 710.010015] do_syscall_64+0xf9/0x620 [ 710.013831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.019025] RIP: 0033:0x7f8c9c1ff5a9 [ 710.022744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 710.041648] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.049369] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 710.056651] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000007 [ 710.063925] RBP: 00007f8c9c25a7b0 R08: 0000000000000000 R09: 0000000000000000 [ 710.071199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.078473] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 [ 710.085757] [ 710.087392] Allocated by task 4894: [ 710.091026] kmem_cache_alloc_trace+0x12f/0x380 [ 710.095701] __vgem_gem_create+0x44/0xf0 [ 710.099769] vgem_gem_dumb_create+0xcf/0x240 [ 710.104181] drm_mode_create_dumb+0x27c/0x300 [ 710.108684] drm_ioctl_kernel+0x208/0x2a0 [ 710.112838] drm_ioctl+0x5a0/0x9e0 [ 710.116386] do_vfs_ioctl+0xcdb/0x12e0 [ 710.120278] ksys_ioctl+0x9b/0xc0 [ 710.123737] __x64_sys_ioctl+0x6f/0xb0 [ 710.127627] do_syscall_64+0xf9/0x620 [ 710.131435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.136617] [ 710.138246] Freed by task 4894: [ 710.141531] kfree+0xcc/0x210 [ 710.144649] drm_gem_object_free+0x91/0x1c0 [ 710.148971] drm_gem_object_put_unlocked+0xd1/0x180 [ 710.153991] vgem_gem_dumb_create+0x10c/0x240 [ 710.158495] drm_mode_create_dumb+0x27c/0x300 [ 710.162994] drm_ioctl_kernel+0x208/0x2a0 [ 710.167143] drm_ioctl+0x5a0/0x9e0 [ 710.170683] do_vfs_ioctl+0xcdb/0x12e0 [ 710.174572] ksys_ioctl+0x9b/0xc0 [ 710.178029] __x64_sys_ioctl+0x6f/0xb0 [ 710.181925] do_syscall_64+0xf9/0x620 [ 710.185736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.190920] [ 710.192550] The buggy address belongs to the object at ffff8880abb67c80 [ 710.192550] which belongs to the cache kmalloc-512 of size 512 [ 710.205214] The buggy address is located 256 bytes inside of [ 710.205214] 512-byte region [ffff8880abb67c80, ffff8880abb67e80) [ 710.217092] The buggy address belongs to the page: [ 710.222032] page:ffffea0002aed9c0 count:1 mapcount:0 mapping:ffff88813bff0940 index:0xffff8880abb67a00 [ 710.231485] flags: 0xfff00000000100(slab) [ 710.235646] raw: 00fff00000000100 ffffea000244f048 ffffea0002c91648 ffff88813bff0940 [ 710.243539] raw: ffff8880abb67a00 ffff8880abb67000 0000000100000003 0000000000000000 [ 710.251421] page dumped because: kasan: bad access detected [ 710.257131] [ 710.258757] Memory state around the buggy address: [ 710.263688] ffff8880abb67c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.271057] ffff8880abb67d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.278422] >ffff8880abb67d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.285780] ^ [ 710.289152] ffff8880abb67e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 710.296520] ffff8880abb67e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00:30:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:18 executing program 3: getpid() (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7d, 0x3f, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) [ 710.303875] ================================================================== [ 710.311232] Disabling lock debugging due to kernel taint 00:30:18 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x54, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) 00:30:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ae160008002000004890f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x41}, {&(0x7f00000000c0)="53000000feffffff1b044803010804004002020000000000000067200000000000000000", 0x200000e4}], 0x2) 00:30:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000017c0), 0xc9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:30:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7, 0x3f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x54, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7, 0x3f}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x54, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) [ 710.553126] Kernel panic - not syncing: panic_on_warn set ... [ 710.553126] [ 710.560522] CPU: 1 PID: 4894 Comm: syz-executor.0 Tainted: G B 4.19.211-syzkaller #0 [ 710.569703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 710.579057] Call Trace: [ 710.581648] dump_stack+0x1fc/0x2ef [ 710.585283] panic+0x26a/0x50e [ 710.588483] ? __warn_printk+0xf3/0xf3 [ 710.592373] ? preempt_schedule_common+0x45/0xc0 [ 710.597237] ? ___preempt_schedule+0x16/0x18 [ 710.601942] ? trace_hardirqs_on+0x55/0x210 [ 710.606271] kasan_end_report+0x43/0x49 [ 710.610382] kasan_report_error.cold+0xa7/0x1b9 [ 710.615291] ? vgem_gem_dumb_create+0x22c/0x240 [ 710.619962] __asan_report_load8_noabort+0x88/0x90 [ 710.624896] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 710.630182] ? vgem_gem_dumb_create+0x22c/0x240 [ 710.634860] vgem_gem_dumb_create+0x22c/0x240 [ 710.639388] drm_mode_create_dumb+0x27c/0x300 [ 710.643887] drm_ioctl_kernel+0x208/0x2a0 [ 710.648038] ? drm_mode_create_dumb+0x300/0x300 [ 710.652708] ? drm_ioctl_permit+0x210/0x210 [ 710.657184] ? __might_fault+0x192/0x1d0 [ 710.661350] drm_ioctl+0x5a0/0x9e0 [ 710.665000] ? drm_mode_create_dumb+0x300/0x300 [ 710.669781] ? drm_getstats+0x20/0x20 [ 710.673582] ? perf_trace_lock_acquire+0x530/0x530 [ 710.678515] ? perf_trace_lock_acquire+0x530/0x530 [ 710.683450] ? futex_exit_release+0x220/0x220 [ 710.687948] ? lock_acquire+0x170/0x3c0 [ 710.691931] ? debug_check_no_obj_freed+0xb5/0x490 [ 710.696875] ? drm_getstats+0x20/0x20 [ 710.700688] do_vfs_ioctl+0xcdb/0x12e0 [ 710.704584] ? lock_downgrade+0x720/0x720 [ 710.708743] ? check_preemption_disabled+0x41/0x280 [ 710.713769] ? ioctl_preallocate+0x200/0x200 [ 710.718190] ? __fget+0x356/0x510 [ 710.721656] ? do_dup2+0x450/0x450 [ 710.725202] ? __se_sys_futex+0x298/0x3b0 [ 710.729358] ksys_ioctl+0x9b/0xc0 [ 710.732820] __x64_sys_ioctl+0x6f/0xb0 [ 710.736710] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 710.741292] do_syscall_64+0xf9/0x620 [ 710.745102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.750294] RIP: 0033:0x7f8c9c1ff5a9 [ 710.754005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 710.772905] RSP: 002b:00007f8c9a772168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.780623] RAX: ffffffffffffffda RBX: 00007f8c9c31ff80 RCX: 00007f8c9c1ff5a9 [ 710.787896] RDX: 0000000020000040 RSI: 00000000c02064b2 RDI: 0000000000000007 [ 710.795174] RBP: 00007f8c9c25a7b0 R08: 0000000000000000 R09: 0000000000000000 [ 710.802454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.809727] R13: 00007ffde7f673af R14: 00007f8c9a772300 R15: 0000000000022000 [ 710.817167] Kernel Offset: disabled [ 710.820788] Rebooting in 86400 seconds..