fffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:23 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:23 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:23 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:23 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:23 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:23 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:24 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}], 0x6, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:24 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}], 0x5, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:24 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:24 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:24 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:24 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:24 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:25 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r1, r7, 0x0)

02:50:25 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:25 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:25 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:26 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:26 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)

02:50:26 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:26 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:26 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:26 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:26 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:26 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:26 executing program 3:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)

02:50:27 executing program 3:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 3:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:27 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:27 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:27 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:28 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}], 0x6, 0x3)

02:50:28 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:28 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:28 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:28 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:28 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:28 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:28 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:28 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}], 0x5, 0x3)

02:50:29 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:29 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:29 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:29 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:29 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:29 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}], 0x4, 0x3)

02:50:29 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:29 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(0x0, 0x0, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:29 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}], 0x6, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}], 0x5, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:30 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:30 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:31 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)

02:50:31 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:31 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:31 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:31 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:31 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:31 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:31 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:31 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:31 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:31 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:31 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:32 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}], 0x3, 0x3)

02:50:32 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:32 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:32 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:32 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:32 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:32 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:32 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:32 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:32 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:32 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:32 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:33 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)

02:50:33 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:33 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:33 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:33 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:33 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:33 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:33 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:33 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:33 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:33 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:33 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:34 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:34 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:34 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:34 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:35 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:35 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:35 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:35 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:35 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:36 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:36 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:36 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:36 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:36 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:36 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:36 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:36 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:36 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:36 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:37 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)

02:50:37 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:37 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:37 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:37 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:37 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:37 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:37 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1}], 0x4, 0x3)

02:50:37 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:37 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:37 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:37 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x6005}], 0x3, 0x3)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:38 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:38 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:38 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:38 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:39 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)

02:50:39 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:39 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:39 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:39 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:39 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:39 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:39 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:39 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)

02:50:40 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:40 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:40 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:40 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:40 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)
dup3(r2, r3, 0x0)

02:50:40 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:40 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)

02:50:40 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r3, 0x0)

02:50:40 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1, 0x6005}], 0x3, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)

02:50:41 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:41 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {0xffffffffffffffff, 0x6005}], 0x4, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:41 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x6005}], 0x3, 0x3)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:41 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:41 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:41 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:41 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:42 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)

02:50:42 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:42 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:42 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)

02:50:42 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:42 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, &(0x7f0000000080)={0x0, 0x7, 0x0})
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@multicast2, 0x4e22, 0x0, 0x4e23, 0x2db9, 0x2, 0x80, 0xa0, 0x32, r9, 0xffffffffffffffff}, {0x6, 0x1, 0xdc14, 0xcf, 0x31, 0x1, 0x2}, {0x1, 0x2, 0x388, 0x100}, 0xffffffa2, 0x6e6bb9, 0x1, 0x1, 0x3, 0x2}, {{@in=@local, 0x4d5, 0x6c}, 0xa, @in6=@mcast2, 0x34ff, 0x0, 0x1, 0x7, 0x9, 0x0, 0xcf2}}, 0xe8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:42 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r4, 0x8}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4231}, {r1, 0x6005}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x8040}], 0x7, 0x3)
dup3(r2, r3, 0x0)

02:50:42 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:42 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:42 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xa0440, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = dup3(r2, r3, 0x0)
mkdirat(r5, &(0x7f0000000080)='./file0\x00', 0x10)

02:50:42 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:42 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:43 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x100}, {r1}], 0x3, 0x3)

02:50:43 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:43 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)

02:50:43 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:43 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:43 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4)
timerfd_gettime(r2, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x5, 0x1fc, 0x7f}]})
dup3(r2, r3, 0x0)

02:50:43 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:43 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = dup3(r2, r3, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8)
write$binfmt_elf64(r6, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x0, 0x6b, 0x1, 0x7f, 0x1, 0x3e, 0x79, 0x11f, 0x40, 0x209, 0x2, 0xff, 0x38, 0x2, 0xffff, 0x1752, 0x6}, [{0x3, 0x5, 0x100, 0x8, 0x80000001, 0x3, 0x7f, 0x5}], "fdfa3047c38d290d65622152bcb412beb68455c6d024bd6718c13cb71ccbf138589fe8a6802a7a8280571de836a3e4cdeac5416432fa2ef7ac355751d1a119946c17440325e44697e120af587c0d16210ab9427af87032b956604801e523950a1cf9754f1975e34388b479d4e518f439865537e9fa184c0277d25e0e3f1d5d8e3bdd5f2133e4f584485d6aa4a0a4e663be1f18546f78b321112cc25898", [[], [], [], [], [], [], [], [], [], []]}, 0xb15)

02:50:43 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:43 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:43 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:43 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
r9 = dup(r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r2})
ioctl$UI_BEGIN_FF_ERASE(r9, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x0, 0x6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)

02:50:44 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1, 0x6005}], 0x2, 0x3)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:44 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x8000, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x1b)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x8000, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x1b)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)

02:50:44 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x5, 0x14f, &(0x7f0000000280)="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"})
r7 = dup(r1)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)

02:50:44 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:44 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x28)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/117)
r3 = dup(r1)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
dup3(r6, r4, 0x0)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x20800, 0x0)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x8a902)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x1410, 0x900, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x40400d4)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000002c0)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)

02:50:44 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)

02:50:44 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, 0x0)
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:44 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'ip6erspan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000a40)={0x1d, r3}, 0x10)
ioctl$RAW_CHAR_CTRL_GETBIND(r2, 0xac01, &(0x7f00000009c0)={0x0, 0x7, 0x0})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
recvmsg$can_raw(r2, &(0x7f0000000940)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000700)=""/220, 0xdc}], 0x9, &(0x7f00000008c0)=""/82, 0x52}, 0x40000101)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000980)=0x7a5, 0x4)
dup3(r2, r4, 0x0)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:44 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1ff}, {0x5}, {0x6, 0x11, 0x74a7}, {0x8, 0xb, 0x307}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xc0}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8004)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
mq_open(&(0x7f0000000700)='pci\x00', 0x2, 0x13, &(0x7f0000000740)={0x4, 0x3, 0x8, 0x100000000})
vmsplice(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="e2098f5972be95da415b766681bc31b2a23313707fb3277779b2221e9fd52c017011c52ff81bb260c679fc9cbbf8160e96ab73589a9d2f5cf6064f1c59480638f96f0ad5862f11c9afabce", 0x4b}, {&(0x7f0000000280)="8b1cb5b15c500d7b9c4dfbc99c485bc3392ad4bc18c458ab4c5abe365a9d305b27e0bd4fb96c716df810e3b3f1f64d3c10070d76c18255a576dfdf3b32fdf3ccf40f886caa809b6972b4df0cf390ef98b420c9eb947c10cd6ccbf4420de544262f4c8ca1248edf9d12d63ce4b428f9fcf83761e5f0b995142a047e8b44f5824aac5213fb521d9860c1fd423ee79cee839cf0eae2aaf46f9b", 0x98}, {&(0x7f0000000100)="4e3165b1eebfe17ec3ea7aecec1677", 0xf}, {&(0x7f0000000340)="88d9b91b572881d36c95aa8104c082c7a331348c62aa6ff2fc62dadce15bce818b07a841aa8e0cebee449612c7b6f47930c1a6027105dabcb3d709c0251a72fad298aed728bcd2a096c0d17220089ff9112a637eb1718a3f15373974aaec81e3fb69bf96f4a5e66cbb807486e307c067b30d05db69ba39af16faa600f308609e5c46fd6088", 0x85}, {&(0x7f0000000180)="1455f563b93f81f5ac5ac5f265d7fa9b6c35", 0x12}], 0x5, 0x2)
lsetxattr$security_evm(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='security.evm\x00', &(0x7f0000000780)=ANY=[@ANYBLOB='\f\aioY'], 0x2, 0x2)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xe3ef, 0x14000)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x6, 0x4, 0x4}, 0x10)
r7 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x0)

02:50:44 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
dup3(r3, r4, 0x0)

02:50:44 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x1}}, 0x18)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100, 0x1, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
recvfrom$l2tp6(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x2, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000000c0)=0x1e, 0x4)

02:50:45 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, 0x0)
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:45 executing program 3 (fault-call:8 fault-nth:0):
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:45 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = signalfd4(r1, &(0x7f0000000100)={[0x3]}, 0x8, 0x80000)
ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000180))
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'm\x00'}, 0x8)
r4 = dup(r1)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
r7 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x40440)
ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f00000000c0)={0x8, 0x6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)

02:50:45 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)

02:50:45 executing program 2 (fault-call:7 fault-nth:0):
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, 0x0)
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:45 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:45 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r11=>0xffffffffffffffff})
dup(r11)
dup3(r10, r7, 0x0)

02:50:45 executing program 4 (fault-call:8 fault-nth:0):
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:45 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240))
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:45 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:45 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x1)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r7}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x90)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

[  250.025623] NOHZ: local_softirq_pending 08
[  250.224915] FAULT_INJECTION: forcing a failure.
[  250.224915] name fail_futex, interval 1, probability 0, space 0, times 1
[  250.237113] CPU: 1 PID: 15460 Comm: syz-executor.2 Not tainted 4.14.194-syzkaller #0
[  250.244999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  250.254360] Call Trace:
[  250.256936]  dump_stack+0x1b2/0x283
[  250.260545]  should_fail.cold+0x10a/0x154
[  250.264685]  get_futex_key+0x82a/0x1160
[  250.268671]  ? futex_lock_pi_atomic+0x2e0/0x2e0
[  250.273342]  futex_wake+0xc6/0x3c0
[  250.276865]  ? get_futex_key+0x1160/0x1160
[  250.281082]  do_futex+0x287/0x1930
[  250.284638]  ? __lock_acquire+0x5fc/0x3f20
[  250.289131]  ? futex_exit_release+0x220/0x220
[  250.293610]  ? lock_acquire+0x170/0x3f0
[  250.297582]  ? futex_exit_release+0x26/0x220
[  250.301999]  ? trace_hardirqs_on+0x10/0x10
[  250.306264]  ? futex_exit_release+0x26/0x220
[  250.310659]  ? __mutex_lock+0x360/0x1310
[  250.314720]  ? __delayacct_add_tsk+0x4b1/0x5b0
[  250.319292]  ? __might_fault+0x104/0x1b0
[  250.323436]  ? exit_mm_release+0x16/0x30
[  250.327494]  ? lock_downgrade+0x740/0x740
[  250.331717]  SyS_futex+0x1da/0x290
[  250.335234]  ? lock_acquire+0x170/0x3f0
[  250.339183]  ? do_futex+0x1930/0x1930
[  250.342963]  mm_release+0x250/0x2d0
[  250.346574]  do_exit+0x56f/0x27f0
[  250.350088]  ? lock_acquire+0x170/0x3f0
[  250.354052]  ? lock_downgrade+0x740/0x740
[  250.358181]  ? mm_update_next_owner+0x5b0/0x5b0
[  250.362840]  ? get_signal+0x323/0x1ca0
[  250.366718]  ? lock_acquire+0x170/0x3f0
[  250.370680]  ? lock_downgrade+0x740/0x740
[  250.374823]  do_group_exit+0x100/0x2e0
[  250.378701]  get_signal+0x38d/0x1ca0
[  250.382414]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  250.387425]  do_signal+0x7c/0x1550
[  250.390967]  ? dma_buf_begin_cpu_access+0xd6/0x120
[  250.395898]  ? dma_buf_ioctl+0x100/0x160
[  250.399946]  ? setup_sigcontext+0x820/0x820
[  250.404252]  ? dma_buf_begin_cpu_access+0x120/0x120
[  250.409274]  ? do_vfs_ioctl+0xe2/0xff0
[  250.413153]  ? selinux_inode_setxattr+0x730/0x730
[  250.417981]  ? ioctl_preallocate+0x1a0/0x1a0
[  250.422372]  ? lock_downgrade+0x740/0x740
[  250.426519]  ? __fget+0x225/0x360
[  250.429968]  ? exit_to_usermode_loop+0x41/0x200
[  250.434620]  exit_to_usermode_loop+0x160/0x200
[  250.439191]  ? SyS_ioctl+0x5c/0xb0
[  250.442709]  do_syscall_64+0x4a3/0x640
[  250.446588]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  250.451779] RIP: 0033:0x45d579
[  250.454959] RSP: 002b:00007fb99594ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.462641] RAX: fffffffffffffe00 RBX: 000000000000b000 RCX: 000000000045d579
02:50:46 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:46 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:46 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:46 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {0xffffffffffffffff, 0x6005}], 0x2, 0x3)

02:50:46 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffff8001, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000280)="5f1bd435e9676c405519771c94e9120e0b357d3ffb24eb95a01f15ec7e1b20e16a5e60f490007f1acdb8f13e8c058bd99f109140b71682349ad8d237a3181887ef5a219e9f5256bc51d2b86101f63d1e4b81e3042a6a2f9c9ae01f958ef0cf317bfeed2bd0d868fbb0b77ee38e8ed1a096c1bf0977fecd5a2e1076b9c43c045d407a6c59762cbb05fd0b72a2c3b57543f5717698b3ea41bb16", 0x99, 0x6}, {&(0x7f0000000180)="9920", 0x2, 0x8}], 0x1, &(0x7f0000000340)='!\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000380)={0x2a, 0x9, 0xc, 0x19, 0x5, 0xffffffc0, 0x3, 0xe2})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:46 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280))
dup3(r2, r3, 0x0)

[  250.469891] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000005
[  250.477241] RBP: 00007fb99594eca0 R08: 0000000000000000 R09: 0000000000000000
[  250.484506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.491764] R13: 00007fffc9975bdf R14: 00007fb99594f9c0 R15: 000000000118cfec
02:50:46 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:50:46 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:46 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:46 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(0xffffffffffffffff, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:47 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000280)={{0x0, 0x0, 0x80}})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:47 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r5, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f00000029c0)=ANY=[@ANYBLOB="a8260000210000022abd7000fbdbdf251600000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="5000968008003300", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x26a8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r9=>0xffffffffffffffff})
dup(r9)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x26600, 0x0)
dup3(r2, r3, 0x0)

02:50:47 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:47 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)

02:50:47 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(0xffffffffffffffff, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:47 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
keyctl$update(0x2, 0x0, &(0x7f0000000280)="8f52b924a611ec24050618040b9b5dd3cf7756cb65e04cfdc6c7c900255a22e36d2974a8ccb6eb5c23a318173cb05f6a76fdc3327f2e8effb1d5693f5a77b3353236e953810b70a85230748382c6e4257b058ceecad2772a5863b60b72e2494630add960bef3b1d923dc6702f1fd9cca3ca290a2f3a61964e31527df7a47f596c7cbfcf0ed6c8b8b345bb4e63d250208df54", 0x92)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:47 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:47 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
r9 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x14)
ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000100)={0x8000, 0x0, 0xfffffeff, 0x4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x7ff, 0xfff, 0x1d0}, 0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
dup(r7)
r8 = accept4$alg(r2, 0x0, 0x0, 0x800)
r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r10=>0xffffffffffffffff})
r11 = dup(r10)
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r11})
ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f00000000c0)=[{r5, 0x200}, {0xffffffffffffffff, 0x9380}, {r7, 0x30f0}, {r8, 0xf010}, {r12, 0x3a}, {}, {r5, 0x2900}, {r12, 0x2}], 0x8, 0x0)
dup3(r2, r3, 0x0)

02:50:48 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 3:
io_submit(0x0, 0x0, &(0x7f0000001680))
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9fa, 0x8a103)
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1cfdc1a211bb9142, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
r7 = syz_open_procfs(0x0, &(0x7f0000001600)='mounts\x00')
ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f0000001640)={0x4, 0x7f, 0x9, 0x1, 0x10, 0x7ac})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, <r10=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000600)={{r10, 0x9, 0x1, 0x5, 0x4, 0x0, 0x6, 0x8a, 0x26d0, 0x3, 0x6, 0x8, 0x7fffffff, 0x1e8, 0x3}})
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001680)={r10, 0x9c})
dup3(r3, r4, 0x0)

02:50:48 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)

02:50:48 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(0xffffffffffffffff, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:48 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x1, 0x5d, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:48 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:48 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xce, 0xff, 0x80000000, 0x8000, 0x490], 0x5, 0x0, 0x0, <r6=>0xffffffffffffffff})
accept4$rose(r6, &(0x7f0000000180)=@full={0xb, @remote, @null, 0x0, [@rose, @default, @rose, @remote, @null, @bcast]}, &(0x7f00000001c0)=0x40, 0x80800)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:48 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
r5 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2d1e, 0x88000)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000280))
getsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:49 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x8, 0x14, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000001c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x1)

02:50:49 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x8}, {r1}], 0x2, 0x3)

02:50:49 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:49 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:49 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
msgget$private(0x0, 0x2)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0xfffff44d}}, 0x8, 0xfffc}, &(0x7f00000000c0)=0x90)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x18)
openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0xc200, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340), &(0x7f00000001c0)=0x4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10080, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/88)
r2 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000002c0)={0x2, 0x1, @start={0x7}})
r3 = dup(r1)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x500, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000001c0)=0x8, 0x4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r6, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r3, r5, 0x0)

02:50:49 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1c}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$SOUND_PCM_READ_RATE(r9, 0x80045002, &(0x7f00000000c0))
dup3(r2, r3, 0x0)

02:50:49 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x1, 0x3, 0x356cd672})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:49 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/61)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x10002)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x1, 0x1)
dup3(r2, r3, 0x0)

02:50:49 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:50 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x3)

02:50:50 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:50 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7, 0x20, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:50 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:50:50 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000080))
dup3(r2, r3, 0x0)

02:50:50 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = dup3(r2, r3, 0x0)
r6 = accept$ax25(r5, &(0x7f0000000080)={{0x3, @default}, [@default, @netrom, @rose, @rose, @bcast, @null, @remote, @rose]}, &(0x7f0000000180)=0x48)
signalfd4(r6, &(0x7f00000001c0)={[0x7]}, 0x8, 0x80000)

02:50:50 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:50 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x384, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbff5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x792767de}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "02cf25c1e6a1f1e6887796e14bb9aa8930ddfe9ee87e69adaf548a83cef058b4beb88695"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "6fa5f9db017c21c68293d8e1d626702cf42b41af84140295b5fda1c3b6a2118fd85bf1d294b3ea3511502d4af620f93e01c555c814e7f407b40dff3d9d594aa47da70c2064135f88554bc6f42ce9b6caa991e739861416d72f858982aefe5000f5c8cabed280c789f46857b3b429efd6c62b6bbac1b5175acc6b3f323f3064d7a1321bb5a1a38682b2e3f2b47a42dc7a1c8f24f6e20a5b56bc6ddff3061f782c93ff2044d0bcaa1ce8549144a0b18b01864bb2b7c11168cfb79985a5c0696c2de93ab13d28dc4ca750097199"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9d2}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
dup3(r2, r3, 0x0)

02:50:50 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:50 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x7, 0x4, 0xe4, 0xfa, 0x4], 0x6, 0x80000, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x6)

02:50:50 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:50 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x200, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x401]}, 0x8)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430)
r7 = dup(r1)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000005, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
dup3(r7, r8, 0x0)

02:50:51 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)

02:50:51 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 4:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6fd, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000080)={0xdd, 0x6, 0x4, 0x8, 0x101})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x20000000004, 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r6, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'veth0_macvtap\x00'}})

02:50:51 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000080)={'vlan1\x00', @random="5821a9b76da7"})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x18d00, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x385900, 0x14c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000000c0)={0x6, 'macvlan0\x00', {0xffffffff}, 0x8})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 3:
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @private=0xa010102}, 0x11, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000080)='vlan0\x00', 0x8, 0x1, 0x3ff})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x6242, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f00000002c0))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={<r6=>0x0, 0x0, r2})
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)=0x7)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:51 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:51 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1a301, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0xa, @sliced={0x3f, [0x5, 0x20, 0x9, 0x1000, 0x1ff, 0x80, 0x4, 0xd443, 0x3d, 0x3, 0x4, 0x3, 0x5b, 0x81, 0x5, 0x40, 0x8000, 0x6, 0x10, 0x80, 0x273, 0x1000, 0x9, 0xc59c, 0x1, 0x1f, 0x85, 0x4, 0x7, 0x2, 0xffe1, 0x7, 0x0, 0x9e1, 0x2, 0x3, 0xff, 0x7, 0x81, 0x1, 0x101, 0x2, 0x0, 0x9, 0x0, 0x2, 0xccb4, 0x3], 0x10000}})
r8 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4000000000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r8, 0x0)

02:50:51 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'veth1_to_bond\x00', {0x38}, 0x3})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000100)={0x9, 0x9, 0x8})

02:50:51 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)

02:50:51 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x440401)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:51 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240))
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x3f5, 0x4, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x1, 0x110000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001640)={0x80, 0x0, &(0x7f0000001540)=[@register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001480)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000001440)=""/40, 0x28, 0x1, 0x3d}, @fda={0x66646185, 0x0, 0x2, 0x39}}, &(0x7f0000001500)={0x0, 0x28, 0x50}}, 0x40}, @acquire_done={0x40106309, 0x3}, @register_looper, @release={0x40046306, 0x2}, @enter_looper, @register_looper, @decrefs={0x40046307, 0x3}], 0x54, 0x0, &(0x7f00000015c0)="5c43185c77463e3a3d65c3bb70007fec5cc9b7d3819353e090c4621a36da4625440d4ae319d358ae4ab211da56e9de98e1883efc513c821b4626997a3cb1ce68d48e2220ecc0aca9c363eaf7a3db99cb416c3df4"})
dup3(r2, r3, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0)={0x8}, 0x4)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000030701020097c4fc5b000000030000082400078088000240000000040800014000000006080002400000000408000240000000400c0006400000008b000100010c000640000000000000000611d144976b1e45edc8dc9ddec37ea7b7efbe0723262076dc720865018194d6acb01dac34"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x8000)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000100)={0x0, 0xcf, 0x2011})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r4, 0x80000, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MARK_BUFS(r10, 0x40206417, &(0x7f00000000c0)={0x3ff, 0x8, 0x5, 0x4, 0x1, 0x4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'tunl0\x00', {0x4}, 0x102})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x1040008})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x7ff})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x9})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000002c0)={0x0, 0x3, 0x3})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0x6, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x4, 0x9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:52 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8)
mount$9p_xen(&(0x7f00000000c0)='syz\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1840020, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d78656e2c6163636573733d757365722c616e616d653d3a2c63616368653d6e6f6e652c6163636573733d636c69656e742c646f6e745f61707072616973652c767569643ccec72712aaf6e08b6979df205cd884ed8ae4f034c1bb1855838ff1acf0af2f5fd6f30b63cc6c2538d97fed5e4aedddc42240f08ffb3ff596e5480fde65b0d6ef43cc511e68439618573fd4f4b2c0b8be9a20d06e747ad49c6e32b51bd74b6c877e9702e02438b25521c99325c87b834bcbc4d01f55d97a5ba21a310bce8d57e20794de8f97ae460232acebab060c56da90ddec01f86a0d4c", @ANYRESDEC=r4, @ANYBLOB=',\x00'])
r5 = dup(r3)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000280)={{0x9, 0x3, 0x5, 0x8, 'syz1\x00', 0x80000000}, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x2, 0x3ff, 'syz1\x00', &(0x7f0000000080)=['\x00', '/dev/ion\x00'], 0xa, [], [0x101, 0x5, 0x8, 0x140]})
r8 = dup(r1)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r8, r9, 0x0)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x3)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:52 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:52 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0xf)

02:50:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:53 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x2, 0x9})
dup3(r2, r3, 0x0)

02:50:53 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:53 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
accept4$inet(r7, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:53 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)

02:50:53 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff0200000004010244a03e61e7363977ea6028af66d49d73436a7cb44668690147abaf2f27771b3f567aa5eac511c10aca9d42602d5dc156db174a7e11b08ff8e7072f5b3bc347673d603067e7772b65f5e2865b151ff338021ad38516ba5308b1446b6017ca028657e6e16dfd9b31e67b0e906b"], 0x148}}, 0x0)
socket(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

02:50:53 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:53 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:53 executing program 3:
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000080))
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:53 executing program 4:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000180)='./file0\x00', 0xa0600, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={<r4=>0x0, 0x0, r3})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x2}, 0x90)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)
dup3(r1, r2, 0x0)

02:50:53 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:53 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:53 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000080)=[{r1, 0x2197}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:53 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:54 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)

02:50:54 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="5c1d0fb8a837c131d39f1a88bac9e03c6352a1c15ba92d7fe4fa1ccbb0064397e888d0ada91ea926aae2ce14627638b1f170f1fd21853de23c988823850bbdeb983bdcad0b8f37d41dd4965bf1674bca0f66b48fc6266320ecf4b58911dcf348d9013c4ae9ff34d9206808a8e8fb59a24234f043ddaa8cc0e614b9c6421468f3ec4948e4f96b4937b14dbc7d0de82c2cfffe87fa947a8f8de6f61a44c4f6a98badf7bccdef24069d53c86c9965c94e0b4438fce027678192eb887677de2d0ea44d46dac46cf6bac90350f8655ad1417864111a914e74e3f3e6d1df7198a385cb7bdf4dc9e9669665092b86cb6d49f6ec31cd1f", 0xf3)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={0x0, 0x9, 0x1ff, 0x3, 0x1, 0x77, 0x0, 0x7fff, 0x3f, 0x2, 0x3, 0x5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x3, 0x8, 0x400, 0x81, 0xfc00})

02:50:54 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x158, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x97ac}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x298}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf01}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9b98}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4226}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x19ca}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xb6c}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffff5b6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x46e4}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000400)='./file0\x00', 0x7f, 0x2, &(0x7f0000000600)=[{&(0x7f0000000440)="0cb280e1eefd7a26e211048a2f746edb9dd852af1e045842bf518bde5d1f6fbebd879e7e67b520f60f54683b5c72f95635be083097347a4f7993cd91156a2a985385bd0b41a95cacdc2f169fefee5b57647c9c69614bc812390a12285149cbb44c247b9ed6334f0709a621fb70b1cd2b52406bc6e075b022b886e0b44635deacc1523140eb6de9b650b672a68a95c375370102", 0x93, 0x5f7c}, {&(0x7f0000000500)="ba0fa65ec3d259a03aebbf5c29d68f1db2e4d62b33dccf5e60794e6f7ace58f6bc41576df1e349e81dcbe2078878cd1fd651bab8289238c7c66162801a5f94b9848f82fa8afed0f98de60e657765f8d67f51fbd308513fb95d41efc8e0fbe2b8d50fe1726705cb649edef62fc0096cacc95426ede70ac97b5efc303c6beed29c27e27e66ed7cbf41310869fc7bfa63438bc1b341f091b937ed6a44500883bce3ee450555a2b86bc0cab1ee97b480a7a925314b0ffaed8997d07a91bfa684ce31d7eddf60700ca73841b3deae926c233689", 0xd1, 0x8be}], 0x30002, &(0x7f0000000640)={[{@data_journal='data=journal'}, {@conv='conv'}, {@data_ordered='data=ordered'}], [{@pcr={'pcr'}}]})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x80, 0x4, 0x5, 0xfffffffd, 0x2000000, 0x9, 0xffffffff], 0x7, 0x0, 0x0, <r6=>0xffffffffffffffff})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x9c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:update_modules_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000844)

02:50:54 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:54 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:54 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x2)
dup3(r2, r3, 0x0)

02:50:54 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:54 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:54 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:54 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:54 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)

02:50:54 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

[  258.432009] print_req_error: I/O error, dev loop4, sector 0
02:50:55 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1}], 0x1, 0x3)

02:50:55 executing program 4:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x9, 0xd0, 0x6, 0x7}, {0x1, 0x1, 0x7, 0x6}, {0x8a7, 0x1f, 0x4}, {0x3, 0x0, 0x3f, 0x80000000}, {0x2c00, 0x5, 0x99, 0x3}, {0x9, 0x2, 0x20, 0xb1b}, {0x2, 0x6, 0x3f, 0x1}]}, 0x10)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:55 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:55 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r3, r3, 0x80000)
openat(r2, &(0x7f0000000080)='./file0\x00', 0x10000, 0x0)

02:50:55 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:55 executing program 2:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:55 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)

02:50:55 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x440101, 0x0)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x4a, 0x0)
dup3(r2, r3, 0x0)

02:50:55 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:55 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:55 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r2})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x280400)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={<r8=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$VFIO_SET_IOMMU(r6, 0x3b66, 0x3)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r3})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000280)={0x7, 0xffffffff, 0x6250, 0x77, [], [], [], 0xffff, 0x37, 0x1ff, 0xffff4a20, "57a9316c683cc7a83490a2457a671e62"})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x600f}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:50:55 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:56 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:50:56 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:56 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100), 0x0, 0x0)
dup3(r2, r3, 0x0)

02:50:56 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:56 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:56 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:50:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:56 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:56 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0x12)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = socket$isdn(0x22, 0x3, 0x21)
fstatfs(r5, &(0x7f0000000280)=""/212)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:56 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:56 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x11, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0xe345}], 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
dup3(r2, r3, 0x0)

02:50:57 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="50a9d58a27959800cc38080001", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf256b0000000a000600aaaaaaaaaa3f00000a001a00aaaaaaaaaa1f00000c0099000400000003000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x800d)
io_setup(0x10001, &(0x7f0000000080))
getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x5)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:57 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
socket$unix(0x1, 0xd32a8bad1b52d91f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='/dev/ion\x00'}, 0x10)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
dup(r3)
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000000000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
dup3(r8, r7, 0x0)

02:50:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:57 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x440401)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:57 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r8, 0x0)

02:50:57 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3, 0x17, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000080)=0x5)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x5, 0xac87}]}, 0xc, 0x3)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'ip6gretap0\x00', 0x4}, 0x18)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000280)={0x4a7b64a3, [0x40, 0x7f, 0x101], [{0x1, 0xfffeffff, 0x1, 0x0, 0x1, 0x1}, {0x401, 0x40}, {0x7, 0x7d1, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x10001, 0x0, 0x0, 0x1}, {0x5, 0x40, 0x0, 0x1}, {0xa3e, 0xe6d, 0x1, 0x1}, {0x931e, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x80000001, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x10000, 0x10000, 0x0, 0x1}, {0xff3, 0x90, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x0, 0x1}], 0x96a})
poll(&(0x7f00000000c0)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:57 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
dup(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(0xffffffffffffffff, r5, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r7, 0x0)

02:50:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
dup3(r2, r8, 0x0)

02:50:57 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280))
dup3(r2, r3, 0x0)

02:50:57 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r8 = dup(0xffffffffffffffff)
fstat(r0, &(0x7f0000000080))
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r8, r9, 0x0)

02:50:57 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
dup3(r2, r8, 0x0)

[  261.016523] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  261.063248] Bluetooth: hci1 command 0x0406 tx timeout
[  261.063258] Bluetooth: hci0 command 0x0406 tx timeout
[  261.068470] Bluetooth: hci2 command 0x0406 tx timeout
[  261.081043] Bluetooth: hci4 command 0x0406 tx timeout
[  261.083649] Bluetooth: hci3 command 0x0406 tx timeout
[  261.097535] Bluetooth: hci5 command 0x0406 tx timeout
02:50:58 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x8c000, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:58 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0)
dup3(r2, r8, 0x0)

02:50:58 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200001, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x2800, 0x8, 0x9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:58 executing program 0 (fault-call:7 fault-nth:0):
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:50:58 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x3, 0x30, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0xa0000, 0x0)
dup3(r2, r3, 0x0)

02:50:58 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r2)

02:50:58 executing program 5 (fault-call:7 fault-nth:0):
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:58 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
dup3(r2, r8, 0x0)

02:50:58 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
dup3(r3, r4, 0x0)

02:50:58 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
dup3(r2, r8, 0x0)

02:50:58 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))
dup3(r2, r8, 0x0)

02:50:58 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, r1)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
dup3(r3, r4, 0x0)

[  261.839846] FAULT_INJECTION: forcing a failure.
[  261.839846] name failslab, interval 1, probability 0, space 0, times 0
[  261.868362] CPU: 0 PID: 16194 Comm: syz-executor.5 Not tainted 4.14.194-syzkaller #0
[  261.876419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  261.885902] Call Trace:
02:50:58 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r3, 0x6005}], 0x1, 0x7f)
dup3(r2, r3, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7710}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

[  261.888494]  dump_stack+0x1b2/0x283
[  261.892128]  should_fail.cold+0x10a/0x154
[  261.896283]  should_failslab+0xd6/0x130
[  261.900261]  kmem_cache_alloc_node_trace+0x25a/0x400
[  261.905368]  __get_vm_area_node+0xed/0x340
[  261.909610]  ? ion_heap_map_kernel+0x85/0x370
[  261.914106]  vmalloc+0x98/0x150
[  261.917386]  ? ion_heap_map_kernel+0x85/0x370
[  261.921880]  ion_heap_map_kernel+0x85/0x370
[  261.926220]  ? lock_acquire+0x170/0x3f0
[  261.930369]  ? lock_downgrade+0x740/0x740
[  261.934519]  ion_dma_buf_begin_cpu_access+0x175/0x4d0
[  261.939728]  ? ion_device_create+0x280/0x280
[  261.944139]  dma_buf_begin_cpu_access+0x76/0x120
[  261.948892]  dma_buf_ioctl+0xf3/0x160
[  261.952700]  ? dma_buf_begin_cpu_access+0x120/0x120
[  261.957714]  ? dma_buf_begin_cpu_access+0x120/0x120
[  261.962733]  do_vfs_ioctl+0x75a/0xff0
[  261.966531]  ? selinux_inode_setxattr+0x730/0x730
[  261.971377]  ? ioctl_preallocate+0x1a0/0x1a0
[  261.975791]  ? lock_downgrade+0x740/0x740
[  261.980032]  ? __fget+0x225/0x360
[  261.983496]  ? security_file_ioctl+0x83/0xb0
[  261.987912]  SyS_ioctl+0x7f/0xb0
[  261.991278]  ? do_vfs_ioctl+0xff0/0xff0
[  261.995256]  do_syscall_64+0x1d5/0x640
[  261.999155]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  262.004345] RIP: 0033:0x45d579
[  262.007532] RSP: 002b:00007f930a9f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.015333] RAX: ffffffffffffffda RBX: 000000000000b000 RCX: 000000000045d579
[  262.022603] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000005
[  262.029869] RBP: 00007f930a9f7ca0 R08: 0000000000000000 R09: 0000000000000000
02:50:58 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r8, 0x0)

[  262.037135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.044404] R13: 00007ffe927fa56f R14: 00007f930a9f89c0 R15: 000000000118cf4c
[  262.064114] syz-executor.5: vmalloc: allocation failure: 8 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null)
[  262.080556] syz-executor.5 cpuset=/ mems_allowed=0-1
[  262.087436] CPU: 0 PID: 16194 Comm: syz-executor.5 Not tainted 4.14.194-syzkaller #0
[  262.095327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  262.105082] Call Trace:
[  262.107676]  dump_stack+0x1b2/0x283
[  262.111315]  warn_alloc.cold+0x96/0x1cc
[  262.115297]  ? zone_watermark_ok_safe+0x220/0x220
[  262.120509]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  262.125947]  ? __get_vm_area_node+0xed/0x340
[  262.130425]  ? __get_vm_area_node+0x27d/0x340
[  262.135291]  vmalloc+0x122/0x150
[  262.139110]  ion_heap_map_kernel+0x85/0x370
[  262.143616]  ? lock_acquire+0x170/0x3f0
[  262.147594]  ? lock_downgrade+0x740/0x740
[  262.152040]  ion_dma_buf_begin_cpu_access+0x175/0x4d0
[  262.157218]  ? ion_device_create+0x280/0x280
[  262.161786]  dma_buf_begin_cpu_access+0x76/0x120
[  262.166522]  dma_buf_ioctl+0xf3/0x160
[  262.170420]  ? dma_buf_begin_cpu_access+0x120/0x120
[  262.175550]  ? dma_buf_begin_cpu_access+0x120/0x120
[  262.180580]  do_vfs_ioctl+0x75a/0xff0
[  262.184362]  ? selinux_inode_setxattr+0x730/0x730
[  262.189289]  ? ioctl_preallocate+0x1a0/0x1a0
[  262.193772]  ? lock_downgrade+0x740/0x740
[  262.197919]  ? __fget+0x225/0x360
[  262.201380]  ? security_file_ioctl+0x83/0xb0
[  262.205781]  SyS_ioctl+0x7f/0xb0
[  262.209137]  ? do_vfs_ioctl+0xff0/0xff0
[  262.213111]  do_syscall_64+0x1d5/0x640
[  262.216990]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  262.222159] RIP: 0033:0x45d579
[  262.225333] RSP: 002b:00007f930a9f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.233066] RAX: ffffffffffffffda RBX: 000000000000b000 RCX: 000000000045d579
[  262.240347] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000005
[  262.247602] RBP: 00007f930a9f7ca0 R08: 0000000000000000 R09: 0000000000000000
[  262.254868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.262165] R13: 00007ffe927fa56f R14: 00007f930a9f89c0 R15: 000000000118cf4c
[  262.282520] Mem-Info:
[  262.285429] active_anon:164287 inactive_anon:4050 isolated_anon:0
02:50:58 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$FIOCLEX(r3, 0x5451)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x42200, 0x0)
connect$vsock_dgram(r5, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

[  262.285429]  active_file:7020 inactive_file:18730 isolated_file:0
[  262.285429]  unevictable:0 dirty:199 writeback:0 unstable:0
[  262.285429]  slab_reclaimable:17308 slab_unreclaimable:123044
[  262.285429]  mapped:60627 shmem:4234 pagetables:1236 bounce:0
[  262.285429]  free:1196759 free_pcp:236 free_cma:0
[  262.336750] Node 0 active_anon:657152kB inactive_anon:16200kB active_file:27944kB inactive_file:74920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242508kB dirty:792kB writeback:0kB shmem:16936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 602112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  262.366448] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  262.393405] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  262.420426] lowmem_reserve[]: 0 2557 2557 2557 2557
[  262.426387] Node 0 DMA32 free:991488kB min:36272kB low:45340kB high:54408kB active_anon:654888kB inactive_anon:16200kB active_file:27944kB inactive_file:74932kB unevictable:0kB writepending:804kB present:3129332kB managed:2621192kB mlocked:0kB kernel_stack:7712kB pagetables:4812kB bounce:0kB free_pcp:1116kB local_pcp:504kB free_cma:0kB
[  262.456849] lowmem_reserve[]: 0 0 0 0 0
[  262.460832] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:332kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  262.487376] lowmem_reserve[]: 0 0 0 0 0
[  262.491360] Node 1 Normal free:3783432kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  262.519922] lowmem_reserve[]: 0 0 0 0 0
[  262.524500] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
02:50:58 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x1, 0x0, 0x4, 0x10, 0x9, {0x77359400}, {0x5dbae6804688a970, 0x1, 0xf9, 0x41, 0x20, 0x0, "47850f4f"}, 0x0, 0x1, @fd, 0x7, 0x0, <r6=>r2})
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)={0x66, 0x1, 0x4, 0x4000, 0x40022218, {r4, r5/1000+60000}, {0x1, 0x0, 0x3, 0x2d, 0x1, 0x6, "3b88fe5c"}, 0x401, 0x1, @offset=0xf8, 0x7fff, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
r8 = socket$tipc(0x1e, 0x5, 0x0)
splice(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffff, r8, &(0x7f0000000300)=0x5, 0x7, 0x1)
r9 = dup(0xffffffffffffffff)
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r9, r10, 0x0)
ioctl$VIDIOC_DQEVENT(r9, 0x80885659, &(0x7f0000000340)={0x0, @src_change})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:50:58 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101000, 0x0)
dup3(r5, r3, 0x0)

[  262.539366] Node 0 DMA32: 7843*4kB (UME) 312*8kB (UME) 138*16kB (UME) 78*32kB (UME) 43*64kB (U) 15*128kB (UM) 6*256kB (UM) 1*512kB (E) 0*1024kB 4*2048kB (ME) 229*4096kB (M) = 991468kB
[  262.556943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  262.568451] Node 1 Normal: 50*4kB (U) 394*8kB (UE) 297*16kB (UME) 57*32kB (UME) 17*64kB (UM) 8*128kB (UM) 6*256kB (UM) 3*512kB (U) 2*1024kB (UM) 5*2048kB (UME) 917*4096kB (M) = 3783432kB
[  262.592592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  262.602026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  262.616918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  262.626410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  262.635181] 21629 total pagecache pages
[  262.639245] 0 pages in swap cache
[  262.642734] Swap cache stats: add 0, delete 0, find 0/0
[  262.648208] Free swap  = 0kB
[  262.651234] Total swap = 0kB
[  262.654338] 1965979 pages RAM
[  262.657497] 0 pages HighMem/MovableOnly
[  262.661483] 339073 pages reserved
[  262.665038] 0 pages cma reserved
02:50:59 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x4)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:59 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x84, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004001)

02:50:59 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x43, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={{0x0, 0x0, @identifier="09276b0908bd6f9efad128aa9544e3cd"}})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)

02:50:59 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={<r9=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0xdb0ba0e61e6925cc)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:59 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffffd, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000001440)=[{&(0x7f0000000280)="c4b29e90c30c028184a18c433dce3231b6e0b77794aac6c762abd4eed958e99ada7d1a5a6f53bb85dfd34634b7ebbea3c7a2cbf0ff328f79c44f4ba22c529b93617822ef3dce9c54dfadaeb2c3b603bd028ad4b9cdd44575f3ff048a996e0bcaa847f72deff44ba12bd8a0a735d10e896e3483f0bfb6c5a82a07dd0086794198e809301afef0ab9c3f008974d9845ec8eb700cbf08389d11c697382fcbebc69dd1a2a74bdfdbf22ef9db6c1b92b5356ee5f7bd8599ce92aa434eaba3b3e282e6a34eea1e74fd5054e3f1e42d2368952d50fe99d858d7c8e7de5343993c254c6ceb2bbd9d0969420aba427dd55ea2313ae0bd16a02889d01be492c52a296846653faf6385064969f0daa26884738fc59942c1bc1c391fe5a6659f6d7446b844b1a062d7eccda61cf7ae838fa3e5e125a576bcc15b2166a4d422f831f6c278403b9b8370ff250b7c32822c377ccdb2333c51ff89d3b66711b5a1cd43fa204445e01ba3963d64ef7c1648cba46074cf5d3ff7ee920f48ebcc2eee4a9f68b9a1ef9812fe131e34a12864c5f2a34af5aad63406bf702dcef3e3ab468e08296a411bdc342e157ce223c95d81f185b9f114ad83d6f49ec1537233319e4bf7dc0ee35a7497fef5ed29293814de5db44bd08521895b7f2162f44ed18764d012167f68634f2e5e87fcafe9e358763b62feba86310384252c1e524f0813b74d6f5353c47da74e5fcccc301774ddfc696a854de8d8cebe7dda69aad22c3aa63763211de6cabd526e43e696dbfc0ffc0da02d05859d7ac9c880479343f93700d6ee98aca251c49f48e56bf0654972f6b03818e684b8cb37b096eef429cba7acda528e6964b0f7eeef904ce0b9e896572e1080c85376fcc0d31b2be82bb6dfc21dba7eb85e6a37bd124801620371ac02357f57547844b63adeee1250c31aecb41094cf9c903e37ad28afadfb6a47c358f541cbdf6dfe1e6709e7e3502798bd5d857c1f27fcdf56cace218db69f145e093ff32cad1d6dc9a91befb5a4eed2631bbb5d3bc4111d0a928c992053a0eb1087ee44eb9bde314ec03a1d90354cfaa9efae6a2dea812302a62b710cfa447d02ef246801088932629e0ce4669bc2c1b72ca80c1d67cfcf7c1ca89c4f67fb270f2c8a64878ab3131bbcec479cbe5fc2db623fa7dd5251f289a686658ab1d64db3797eab4d3adddd3181b5e80ef5c0812e04bcda61812ce9f77b9b369d375d1aa64a155ec51d2ffef3b9ab0bc96cc5604e36c4a257390c05165e97c0e9d10422646251c1a060de03e0f47e6d6a6707d894a5332c42d094b3df3aabde141eccf69d18eb8c6282cfcd8f3736fc65150d20e9909bef620f244d1ac1fd464cd2cd3ee18901e6f1ee843cd6445cdd697982cd03a9a9a7adcd9db580c7bc392356cc539855bf0652e59a4624ca02b96814374b329f8f17af2cb7bb657dd6b600b3feaa7c9b75675b429804f9f644edc47f2d761c4ee60077e562feca6194f90d8fd4d69f14e1f3dca289582afb3e0b909d38828ce03ea1e3f0ed03417944e9f785a1b73816c53e6163845577aed2a5b8d9bae90400e9d2ff11b8852b904e8218266a9e7d986e41274a5afaa8755604e06f6398c0deae367bace8ed5162fc91a2a568d45d5bd7f2a8ddd787cededfdf542cca3c233a51e96e43b1a3a229daea5ed0b179cf44dd4c12c68860eb90d199d23dea74a3786b7af6c733c7bb7ec783dc1ffea47717a11cb7b586210eeedd282e7788ac00ff437f9e4f58bcf9e88d5e3f6deb2fd0382900fb251254f05eb6cf89e771b907a8ea8fa3e323d2f34c79b0b5d35cfaa327e05bf61c2bd5226e64b906284cbb070118948f5721eecfc818d2a364938c7f5b4212ae94532ba7e550499efc6237f25b711cb8eec094eab6945e5e3089480a7a25293cc2213cc37b97d51e44804ba6e780f328e28787fba220df9ffc57bdd82969eada89441b233775b51edae722cb25a58ca8f719d6165111a66bdb9773c44b4235c02fbf03a93ea9994f016743379c02b444f9cf602d554469902a7a7eb5a2e69f244b20e2255811e9e01f51df7d8b1f3fce3eb080db86c66ed1305890beb8d6319825c62680678a91f0a2804cda3cbaf955c4bb9c80a6afc6fa3399ec0f51c0e3df7d5239b17856f7c647457fd404646bd090d9f28e9b3dcaed56dd0fd2f3354c1173b0b3092a49dfc5c3f4458a3f16426b1b6a459620b5b08bd4662e4508e809831393f8332ba5814c253296362803efe04b4ad3f3641e74a06a50fa8cb161c4025334e45eed70fd72957bbbe79a91d455f37d87b99a3297881ceefce71c4edc35c0e6817e408fe55ecc73730bbf29e1d03d870e7cb8318344f2b18736ac19812f324f44d1555da144a35d235403ec2625ae32007dee27a11ef1b89f59fcda6318c94f460e00fafc424b147f7f9f74e6b0dcd14b7374db290f4bbdcf77eccc478a283859f5328aa6de35c8186f6cee52dd811217897df82d365876dda8b12f62d62c4b8a7b5f8603f2c56fbd27613b2f269020f5628b63b4c777c014c4b150763158f0c48260350f08d7ca80873d6d2c14453a6c31d0ae25ffc3676c5d2c5bcdf8f13d79347449e4281381662d89888758dbd08de1c08ae5ee375402ce5f29ff14f39f3a32a933a85b112457a3764105a726252831d79d25d0ce8f1fe2c8f588f180c89ff61d5339bfd5d8f5feffb0dd3457afb54996133349f159f2cf4dd2d87623692ff4cd01cf80a729a3e2a8c9d170efc63afb66b3bbd2cdec689d792d29e847eaf67c14c345e59f3c5f86daef03459f504be92edf9af99a08eda8e9894f6ff4f8f483e829f904f66d89f51c78753ea3ff4fab06d8f68275a88d63b1a2af819c85bc563216482e9d9bad7aaa66745ca58d79e0bfc8172e6d43255f0d00607a4773464d747444d319573e9fe4f11fb5e2d8cc4b49cf073f606889385d6e0651da6cbad3bb629ec87f1042a81825b192b38ebd20e33a4318c10090b8ee6c6804ab15810638b8502c34b7290632caf98fede52ed66f7321fe3820f64ad8c3527858d92f537ab663e9c5141a5ef80a60a45cc65fc0accede0d25041dfee60933f1c850e2e1ee175f587b888f1bd23cb224c0f75d931341a13ad0a1b555446dcb24a5d425286b6426514d88d4022f4e821d66cea390afac4c62d39c247bd5b625c42c20cf8c79143e676c0e13acd2ca5a8df70375acb46c6eebb57ea4350e9ea7a88ee8d0a508a71c99df99fc9050d8c85db49d02ab7ed4353ae73df4aa550e7e3dacec9b7adabb0b6242ecc3c4d3f4b03d4b92e6ba289d838f91e9cf2b6c2b7b47ee3ccefed6f0ae3c0878d8f627b04c8764f2f537cce898f63e5db8f3d77afbdedd3e091ca6e72d08877e27f2f41d93f825a0770d69ec80c8ed487cda57a9fc527fb2688e0c7f7bf9c8b9a834b805d798b2c40bff01a0b52651317147bac60252e1d5fbd40991f6f28e8c31a6866d610fc25532a26bd30697ad7d56ee44d151a6c3fa2906c6bb9cb35e27442c964915f24acd06fcc59135f4e16d6b9cf8b84003e605c5c1e4e86b223bc89a232cb3ea7d73e269659fac5d2fc05fdd617eaa417df626f742ae84ec151559604dffe00f976ec9e33758c479ea85473676be7ac10f48aa19176fc4b9d47747c4cf9959541e8ef7d5ca5975b4a56a3094ac4e2263a5354016cfe322a27afd1adeeca4e26a1f463de7d4d7cc7224e495dc8a98d732e80d2149284e15173692ecd7625a4bd7a16b571ec9e4bd159a4cadde35f25498db6c6beeec81aec0991f2be860cc765edf2b4cfdb25e13bfdc6252f206a2be56b2046d98c762a068353793da896c6b58b6e09ef6df0e4da9b8f31f442013ee720d24445c6a5bbc003a4fd78489b83e613e8cf2d0997ae8bad5d454711df0e9c26dcc792181b3287afa08fbcb63a6585c9cca45c67190c2f6912659c7802c60a5b2cd56c4587dff05d8b84f7ab09e31ce017453b90a8450bebcb6cbaea5bacb05b46c93f14f9b7e15c7725a4a66c4409727deeb3bc8c3bb278c709bc39a85be1d803f5d834fde97dc20b37edd6677a8af5ba9aaedcb3b510d57f8a150ed8b4b8af90717e3ef7bf46652bde1262d626035e68510cdc7fc834fff7487962d71d989838d07d1f884ef2058860f72b12aa391e46d53261689053d5182ee57548c47be4c1bf94bd3a20c4fc8553a481ab6ee46bba5f9a564b0fb97a792ef87b204684a36f4e9ba9cc63c5531371b11393ea7e798ad9c51c557db84ed83cbb2dc33b491e1f0f481dc19f6e1838f7c882a22c8817431d7792222694fcc2b7a43852aa9ab3e72c51acf0287b5841e58ff4dee8e6f670800f9302b8496b3560e3dbf81efd892fc9e5a80c621031ce3fbf745efcfbd4f827290b7e0d073f634ddf6421e04447d2da3ad1fb12fdd62550bbff04d6f3c9163a9c223fb3cc79c8091e05c11b826a681a0ed9c4f286622b159ee4fcd9ae3f8c2eb4f3bb4f5deec99f457e4a724707d919f273c8cb558c64738563086c5f7177b63d22b6d39948a881bbcc0d48d49c72584220a382c803a6c61dbfb36f667058a02cd22a01530335e31c4e1f1e8d753ddee22f379c83129946a52e1fedb0ab68e12b39f5adbd7a2de1551048dd68254039b88d3731775a3196c2b7e529194bc2deea7dff0d9d243d581822be9797a86e2c99edbc38b9e865f0603b0f1835f8bdc68a5281cab40a8a46378133c619b94ab646a54ec2bbfe58ada98f6fde22e6485cd38d46880f6d7715519e72eb13d89c8a3f344df5bcb7bf200419d9b7ba00ec3f3143de2a7c104bb1c8ceb50f32209e82701402200147febfa417e8ee0ba9bfa3bab71ec0de41ded60ffa91ad34f4f8cb43aebbac9bd5046e45a1b253e4b4e69cc68ebf7b341c9620ad2dbefa4463774ffb2b1c34a5a48096681336984e8f272134f5e5b468478dcbc4e6647c1f06e1c6df249160667ed15855f274126cf5d64aab61e76c9c7a5b02b98c3ba875f97be5f0b378e7a345db151c77ba71fbbf0a72ab212d9b169f89270c1b7c511deafb678c149eb3fa1277d1d9c381a2f352080872e4fd65a323176e6b807183cba547597056b6572dd77c3b59cb7bb24f94930fd2ac130701942b03cb6cbab8fc31f5906a952ca4a038653f9803cafb0266f6142c616ad2f27f7f535866c4646b913d4ddc316c5972cdf5cbb6a7a7abf5a2a09e1572dc4b9b46b8e29bac36e6672b63a54bc7292f029c819e5a5ee79d822d1c21d6b1bbc2dbff22e3c2678206abc79f116eb191bd51596d421fa204b2b35a9e03722aded8be6dad9e9c292ec8f2a6a935faf9e86c26935d1cb0c1c002ab9b35a6ca9a63ff4f201e16c69064bb1a460fc8be642d3cf900ede075b1e89b29fdbfb918b79712305bd796d119b08f1e7e074ca34eb3e59ecd5596e6bf8ae2d1669b2849b625f1b73ff5941fe8d21f283120ea27aa8170884c79cc9c8b6e323f3486628375f473c14bb8d14ba298e3d79fde4b9d09ed9a51432afdcba095d3f4bf10d00e5992c9d8dd908d62569b52a360839001d8aa14cb587fdf9e578efa6d1967b7a06e0c20540d042d5cea6db1654068f74364459839f3e45271fb8a59ccaf883732924f389c79b1e32cdd49fb661eb75b6614b7787a9b2f370d9c2f3c179806d0654cdc1dcd9d0b2600c4a136e351ed1e27745ae020ad1d51a685172a62b25a53fd09cab6be05795d07426f0507a466794576470fd4538e53b878f4596000d2c6477ddf51598f219b0e34bc2cfe913daad424ec3cb6c0f23faa17a1ff1e359f4c42890", 0x1000, 0x6}, {&(0x7f0000001280)="b2b99e9b33d7a4ceb268c6098884b86840b4f04fe7bcc5c0f171dfad35f2348c823e43bbb1a77160c6da7b9ac60c558f6149492e202796cca94f429da7a27093801a3cee026acf4ad1d9cdc40af6a40e3f98eb4ab68f674ff4e4d47e2c6eb601feb5a9fa472e80e66b529f7d0386de8c89cbd45f8504b93666b572c6507bfcf3ca4769bb23fe2dc5f46ff60f1b949e6e7c84c626c32e3ccc0e7a9f7e9fe779dc2008add44e5d301d1965edbc368b1ddb870a6e993fff280f3bfe636d99fa8fddd6b7e55c657962b1638cd533f93c3bbfeefe1222", 0xd4, 0x5}, {&(0x7f0000000100)="f074750cb4a8f90210f224187e93b30bac6c1314d12f76f878ca4bfd5b30d9a9a545f8e68d8e0a4a5c76b8a462af529b", 0x30, 0x36}, {&(0x7f0000000180)="f59f814b0da65bc7ebf4eebfb4f259504b73a30894c001ed8b3c4e531635dd1fb64232ead1e9df3913341ef19852302aa3ea5b820a033b18f6160d6841ad31a6a0860531a9ec4ccd1e4cf53230311cfd5958", 0x52, 0x34}, {&(0x7f0000000200)="6de521a8f1606f65e02da8675b0b1840081ac745d1433ed4570f0bcaa4752c36065109935bc924e4c7f191fccf17f1ba0724a7bbce5f", 0x36, 0x100000000}, {&(0x7f0000001380)="cdf2ccc6da4350c86410e01fa5beff0b5ac3b69d5f7528b3356d69bf9da1b3c01a47837382dee0d8a387a4ec5470512c090f5fa560fe97f3c41e279b3be2e3e44ecea86973827df879e63f708ddc5ecc205fe59dac164aacc2420a33e47b7b6061370034356f02b589400e1a33f28e7408c5b52557b9ba8af7e5bc0bec94ac277c7e054af2677db0eb81fea958f3073c1f9916e51ef1f96484", 0x99, 0x800}], 0x800004, &(0x7f0000001680)=ANY=[@ANYBLOB='extent_cache,inline_data,inline_xattr_size=0x0000000000000fa0,noacl,whint_mode=fs-based,nodiscard,subj_role=/dev/ion\x00,smackfsroot=/,euid=', @ANYRESDEC, @ANYBLOB='\x00\b', @ANYRES16=r10, @ANYRES16])
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000001600)=0xb9)
accept$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001640)=0x14)

02:50:59 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200000, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x400000008003)

[  262.840081] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xb72caf17)
[  262.848105] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  262.863619] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  262.871092] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  262.880828] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xb72caf17)
02:50:59 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x10, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x50001)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x8002, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x54, 0x4, 0xffff, {0x101, 0x9}, {0x5, 0x8}, @const={0x3ff, {0x40, 0x0, 0x0, 0x3}}})
ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000180))
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r8 = dup(r0)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f00000000c0)={r10})
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)=0x1)

02:50:59 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r8, 0x0)

[  262.889591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  262.897949] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  262.906152] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
02:50:59 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r6 = dup3(r2, r3, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x606100, 0x0)
io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x28b65efa928b38b2, 0x8, r7, &(0x7f0000000280)="f1be2b13636bbc975e7e2b4b8bdf64f87176f2fbdd87f2b0c79402977122a180ae0894f264175b76a01f3e823df66b7a04dadcaae571b3ff632168d21f1cd6399c6bb3040bd7f09441c797eaa27ad39417dc6997476bb11682ae5e318e3060923b6e638d6280eba449ce5a3938d02146c25665d610ccf5888ba78d90f94bd312876265ed89d50b23a3a4a1b4caed2a41bb1db2dc1f287d94ef7092ef3475b219f285d7fbef205a0209fc3269", 0xac, 0xad93, 0x0, 0x1, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000340)="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", 0x1000, 0x0, 0x0, 0x1, r2}])

02:50:59 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f00000001c0)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x6)
dup3(r2, r3, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x604140, 0x0)
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)
dup3(r7, r8, 0x0)

[  263.000430] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xb72caf17)
[  263.018640] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
02:50:59 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000180)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:50:59 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x90c00, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040014)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000180)=0x4)

02:50:59 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:59 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:50:59 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2800, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x206080, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r8=>0xffffffffffffffff})
r9 = dup(r8)
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r9, r10, 0x0)
poll(&(0x7f0000000080)=[{r10, 0x4120}, {r2, 0x4248}, {r9, 0x4084}], 0x3, 0xfffffffc)
dup3(r2, r3, 0x0)

02:50:59 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = signalfd4(r2, &(0x7f0000000080)={[0x5]}, 0x8, 0x80800)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400200, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:50:59 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:50:59 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:50:59 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = getpgrp(0x0)
sched_getparam(r5, &(0x7f0000000080))

02:51:00 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r8, 0x0)

02:51:00 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001240)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x1, 0x4, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
dup3(r7, r6, 0x80000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r8, &(0x7f00000017c0), 0x218, 0x0, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xc0000, 0x0)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000011c0)={0x1, &(0x7f0000001180)=[{0x5, 0x1, 0xf9, 0x7276}]})

02:51:00 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7ffe, 0x220180)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:00 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
poll(&(0x7f0000000080)=[{r2, 0x1000}, {r0, 0x20}, {0xffffffffffffffff, 0x22d}, {r1, 0x84}, {r3, 0x400}, {r7, 0x1404}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4040}, {r5, 0x100}], 0x9, 0xfff)

02:51:00 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)

02:51:00 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10d180, 0x88)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10010, r3, 0x3a6c000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/vcs\x00', 0x101400, 0x0)
bind$isdn(r4, &(0x7f0000001d80)={0x22, 0x5, 0x7f, 0x1}, 0x6)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:00 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2b8183, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:00 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x141000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:00 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:00 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
dup3(r3, r4, 0x80000)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000080))
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x31, 0x1, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
getitimer(0x1, &(0x7f00000000c0))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)

02:51:00 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vcsa\x00', 0x290842, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000001740))
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setfsgid(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r3})
readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/25, 0x19}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/24, 0x18}, {&(0x7f0000001540)=""/107, 0x6b}], 0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000001780)={0x5000, 0x1, 0x6, 0x8, 0x5})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
poll(&(0x7f0000000080)=[{r7, 0x210}], 0x1, 0x2020)
r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
write$binfmt_misc(r8, &(0x7f0000001640)={'syz1', "5c5987aac0d6a16660549fae4a09968b6c281e8ce84c7077c4d2f3f5a18fc810a861028d4858be8c60ed43a39e7353c1894105ae10b687fd4559277aea9e9bac7685ccce10690b2d32aefad67da6771ff88e7811977fec58ac2d81d2bbe22e00a7cafb93f505714b7834b98f1ea2219d8a0d6f51f80c156fcbc38be1b2143b96545d30b58beabfe45b996b26e5d8342019792db8c04ef0d65b12998ef541e57a09236ee25cce5beb349b242fcbb830a07d"}, 0xb5)
dup3(r3, r5, 0x0)

02:51:00 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xa800, 0x0)
ioctl$LOOP_SET_CAPACITY(r10, 0x4c07)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)

02:51:00 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, 0xffffffffffffffff, 0x0)

02:51:01 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:01 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
getpid()

02:51:01 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
write$snapshot(r2, &(0x7f0000000280)="cd654b2bdf49ecf096b456fc16500ec85ddad04bf6264e53c3e94e27fe2354b62ef93dfe2b358d5b28a2e73cdab91a43d6f82e1117ce5ccfb57b83893b07a9b18f200e7d19f35835f38038170bfaf0be6068780337c0a2dff8e2ff1f157534f5a5584acf6bcb4e9a903fe424a58a003a78945f9e03858dd3ab0894fd8232dd5e216679bdf7580d5bbd0b63e20ef68fe755cfb82d6adec33a0381a09dcfe1ba7284b94b15c84c36a278c448113c37309a5f52b7922f7b958b16bc78d29567e1470ed22ebadafece532e2c88a227b08c6ab16db9e1ae1076e8a1ebd3d24a78e4aa3459b90b2e53a1a25ce1afd17c5ce8a64a", 0xf1)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:01 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0)
r1 = getpid()
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffc, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008540)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xf1}, {{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/229, 0xe5}], 0x3, &(0x7f0000000440)=""/7, 0x7}, 0x400}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000002ac0)=""/233, 0xe9}], 0x3, &(0x7f0000001880)=""/255, 0xff}, 0x1000}, {{&(0x7f0000001740)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/191, 0xbf}, {&(0x7f0000004440)=""/204, 0xcc}, {&(0x7f0000002bc0)=""/15, 0xf}, {&(0x7f0000002c00)=""/200, 0xc8}], 0x5, &(0x7f0000002d80)=""/4096, 0x1000}, 0x401}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000005ac0)=""/4096, 0x1000}}, {{&(0x7f0000006ac0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006b40)=""/32, 0x20}], 0x1}, 0x1d33}, {{&(0x7f0000007040)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004300)=[{&(0x7f0000006bc0)=""/211, 0xd3}, {&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/47, 0x2f}, {&(0x7f00000082c0)=""/164, 0xa4}, {&(0x7f0000008380)}, {0x0}], 0x6}, 0x3}], 0x8, 0x100, 0x0)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write$P9_RSYMLINK(r4, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x80, 0x2, 0x3}}, 0x14)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="743f6b95da9a4d9e7c2042231c0945e334135e971ef0fe5e81c94e45926097637ca2ac583c6aa132f1305258da69657ba744551283713c71e9a5a0c76f0030ff73246603a327cc7d8ddf3d778badf8fa2d507d73df3e9a435365b9d34c1ff013de147b319c7a78b147345fe93a8ac977674310d6dd10b999599d158aaf4ec3f879518cb82db202a4b28cd46ae964cdd612364f93fdadc37f5c69d4df9e1de976904cccca4beafd8b71bf8f147e1c8deb26bd70e8d97df37ac575f3daded51983df98cfd48f1feed6da46a3785407bffef681f2f94321de5a0a91ab30bd714c899a", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf250400000008000200040000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ftruncate(r5, 0x800)
lseek(r5, 0x0, 0x2)
open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)

02:51:01 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000080)={0x7, 'team_slave_0\x00', {}, 0x9})

[  265.252027] audit: type=1804 audit(1598410261.564:12): pid=16423 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir905429642/syzkaller.bcI6r2/393/bus" dev="sda1" ino=16639 res=1
02:51:01 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:01 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, 0xffffffffffffffff, 0x0)

02:51:01 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r5, 0x63fe2000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0xa80, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r9)
ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d06, &(0x7f0000000340))

02:51:01 executing program 3:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

[  265.675326] audit: type=1804 audit(1598410261.994:13): pid=16422 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir905429642/syzkaller.bcI6r2/393/bus" dev="sda1" ino=16639 res=1
02:51:02 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0xd, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8820}, 0x40080)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "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"}, 0x1004)

02:51:02 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@euid_eq={'euid'}}, {@euid_eq={'euid'}}, {@measure='measure'}, {@euid_lt={'euid<'}}, {@audit='audit'}, {@fsname={'fsname', 0x3d, 'fd'}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setuid(r6)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000005c0))
sendmsg$nl_netfilter(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08007a00ac1414bb6bc55585b5cb7b062da896c5daf949454258af7658579c4dba2a647b48cd2d643860428b59f7feaf32f85dba3530db408f67ef62b7149814875d6cf682d0cf88968678a6338686195f7a82dac0f407381513519f2d9ea810be9253016f85c650258005d6a9ccb1e56d20225fef753211140000"], 0x98}}, 0x20040041)
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="22a514163350af6d3d508e4981b22c3f3f244544bad5860a0b4927249fef137c29e6186b54e7d16512849a88c874cbaf59cecbf942f7e2321101121d1d9b2eddb8a4b991f44d8c6fb95d523487d5eea569c0d4ac0c9b9166edb542b1fac920bcda1e67116369230501d6f3a931cbcb873e891ebe3d971d5da6c457d8cf6f4b465b28928d7be1eac5650096abad3de5881c978f9eae964146260fa7c69442425c1623c667a7ceeb08d87268124cf89bb3000869b4c131cfa5daae44e3343bdbb3082bc025ca823da8a2410a3d8e0674a2c89937e83c409c10", 0xd8, 0x9574}, {&(0x7f0000000380)="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", 0xfd, 0x1}, {&(0x7f0000000180)="9cdfdd48db0289cc52a10dbb3dd45a8c54b80393d676a72a8cace69ef5", 0x1d, 0x2}, {&(0x7f00000001c0)="8b7adfaa001dd33684f050fe8248a05d96f37fdf657e7482569837e63e54f05db3b2f96ac5b0a744f5df3c74", 0x2c, 0xfffffffffffffffa}], 0xd188a, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f696e746567726974792c6572726f72733d72656d6f756e742d726f2c6673757569643d36663202623932372d630066332d3463353b2d616534332d5c366361323561622c7569643e", @ANYRESDEC=r6, @ANYBLOB="2c646f6e00000000000000d5626a5f747970653d2d243a7c404b2f5c3a5e2d2c736d61636b66736465663d2f6465762f696f6e002c61756469742c00dd4a81dccb831881b4"])
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:02 executing program 2:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)

02:51:02 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x3f9, 0x13, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:02 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, 0xffffffffffffffff, 0x0)

02:51:02 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = accept(r2, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80)
bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:02 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7ff, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:02 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
setuid(0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08007a00ac1414bb6bc55585b5cb7b062da896c5daf949454258af7658579c4dba2a647b48cd2d643860428b59f7feaf32f85dba3530db408f67ef62b7149814875d6cf682d0cf88968678a6338686195f7a82dac0f407381513519f2d9ea810be9253016f85c650258005d6a9ccb1e56d20225fef753211140000"], 0x98}}, 0x20040041)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, r6)
r7 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@euid_eq={'euid'}}, {@euid_eq={'euid'}}, {@measure='measure'}, {@euid_lt={'euid<'}}, {@audit='audit'}, {@fsname={'fsname', 0x3d, 'fd'}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, 0x0)
setuid(r8)
sendmsg$nl_netfilter(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08007a00ac1414bb6bc55585b5cb7b062da896c5daf949454258af7658579c4dba2a647b48cd2d643860428b59f7feaf32f85dba3530db408f67ef62b7149814875d6cf682d0cf88968678a6338686195f7a82dac0f407381513519f2d9ea810be9253016f85c650258005d6a9ccb1e56d20225fef753211140000"], 0x98}}, 0x20040041)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000280)="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", 0x2000, &(0x7f0000004cc0)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x10000, 0x2000, 0x8, 0x6, 0x22, 0x5}}, &(0x7f00000000c0)={0x18, 0x0, 0x400}, &(0x7f0000002280)={0x18, 0x0, 0x396, {0x8001}}, &(0x7f00000022c0)={0x18, 0x0, 0x4, {0x4}}, &(0x7f0000002300)={0x18, 0x0, 0x1, {0x8}}, &(0x7f0000002340)={0x28, 0x0, 0xffffffff, {{0x8, 0x9, 0x2}}}, &(0x7f0000002380)={0x60, 0x0, 0x2, {{0xd2a, 0x3, 0x100000001, 0x8, 0x9, 0x3ff, 0x4, 0xffffffff}}}, &(0x7f0000002400)={0x18, 0x0, 0x401, {0x7ff}}, &(0x7f0000002440)={0x1f, 0x0, 0x4, {'/dev/dri/card#\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0x800, {0x0, 0x8}}, &(0x7f0000004500)={0x78, 0x0, 0x1, {0x67d, 0x1, 0x0, {0x1, 0x7, 0x3, 0x3, 0x5, 0x0, 0x2, 0x8, 0x101, 0xc000, 0x3, 0xee01, 0x0, 0x8f0, 0x401}}}, &(0x7f0000004580)={0x90, 0x0, 0x1af667bc, {0x1, 0x1, 0x3f, 0x2, 0x3, 0xb8, {0x2, 0x10001, 0x1f8000, 0x8e1b, 0x1f, 0x70, 0x2, 0xffffff8d, 0x6, 0x2000, 0x200, 0xee00, 0x0, 0x6, 0xfffffffd}}}, &(0x7f0000004640)={0xa0, 0x0, 0x400, [{0x2, 0xfbcd, 0x9, 0x80000000, '/dev/ion\x00'}, {0x0, 0x5, 0xf, 0xaa, '/dev/dri/card#\x00'}, {0x5, 0x4, 0x9, 0xb1ca, '/dev/ion\x00'}, {0x5, 0xffffffffffffff56, 0x0, 0x1f}]}, &(0x7f00000047c0)={0x3e0, 0x0, 0x214, [{{0x3, 0x2, 0x0, 0x7, 0x2, 0x1000, {0x6, 0x7fff, 0x33, 0x9, 0x1, 0x101, 0xffffff1a, 0x3, 0x0, 0x2000, 0xfffffffe, 0x0, 0x0, 0x6, 0xa9e}}, {0x2, 0x7, 0x9, 0x5ce01162, '/dev/ion\x00'}}, {{0x4, 0x3, 0xffffffffffffff81, 0x800, 0x7f7d, 0x3, {0x3, 0x3, 0x0, 0x0, 0x9, 0x6, 0x1, 0xfff, 0xa94, 0x4000, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x589}}, {0x4, 0x4, 0x0, 0x9}}, {{0x3, 0x3, 0x3, 0x7fffffff, 0x1, 0x8, {0x3, 0x1, 0x7ff, 0xae, 0x1, 0x5de, 0x4f17d8c0, 0x10000, 0xffff, 0x0, 0x6, 0x0, 0xee01, 0x5, 0x200}}, {0x2, 0x0, 0x9, 0x201c, '/dev/ion\x00'}}, {{0x0, 0x0, 0x2, 0x8, 0x96, 0x80000000, {0x3, 0x56e4, 0x7, 0x0, 0x0, 0x31627326, 0xfffffff8, 0x1, 0x81, 0x2000, 0x107, 0xee00, 0x0, 0x0, 0x800}}, {0x1, 0xffffffffffff2661, 0xf, 0x3, '&-\'+-&[{$+[+.*%'}}, {{0x3, 0x0, 0x0, 0xfff, 0x80, 0x20, {0x0, 0xffffffffffffaf0d, 0x9, 0x6, 0x1ff, 0x1000000000, 0x6, 0x100, 0x7, 0x0, 0xffffff2e, 0x0, 0xffffffffffffffff, 0xac15, 0x610b503d}}, {0x0, 0x9, 0x1, 0x1, '\xfd'}}, {{0x4, 0x2, 0x9, 0x7e6a, 0x1ff, 0x1, {0x2, 0x6, 0x100000001, 0xff, 0x3, 0x1000, 0x1f, 0x6, 0x2, 0xa000, 0x8, 0x0, r6, 0xac9, 0x3}}, {0x2, 0x0, 0x1, 0xffff, '#'}}]}, &(0x7f0000004bc0)={0xa0, 0x0, 0xcf6, {{0x4, 0x2, 0x1, 0x8, 0x2, 0x0, {0x2, 0x2, 0xfffffffffffffc00, 0x80000001, 0x9da, 0x5, 0x3, 0x8f, 0x6, 0x6000, 0xa739, r8, 0xee01, 0x1000, 0xaf2}}, {0x0, 0x8}}}, &(0x7f0000004c80)={0x20, 0x0, 0xb76, {0x5, 0x0, 0x2, 0x4}}})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:02 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
pipe2(&(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000280)={0x6, 0x1, @raw_data=[0x9, 0x8, 0x0, 0x7, 0x9, 0x9, 0x1, 0x0, 0x100, 0x1, 0x1, 0x5, 0x6, 0x7f, 0x8, 0x5]})
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000001c0)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300), &(0x7f00000000c0)=0x4)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)
dup3(r8, r9, 0x0)

02:51:02 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$CHAR_RAW_SECDISCARD(r5, 0x127d, &(0x7f0000000080)=0x5)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x4)
dup3(r2, r8, 0x0)

02:51:02 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40800, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fd913c33da476a0d6e297f38cf7e3bd34b65af1b785f891484cce3b96a5ae812ece50969e33fd2dfe2e65679e3ca69ef7b9285b6c40f1b6a5a94f80910a4f2bd264f51314ad41d59c0315b4b9b517538a01d16058ce45175b135753681b8c6e7713f0848cafa69863e20d63f47e5c751235af6e12f9b16136b96f0e2895c09d3c08bd270a43d67a02ebea19f67b1f37685fef824a7cc6d42a7fac5d753", @ANYRES16=r8, @ANYBLOB="000329bd7000fcdbdf2509000000240005800c000280080004008000000014000280080001000900000008000400090000005c00058008000100756470001400028008000300010000000800040001010000080001006574680024000280080001000700000008000400050000000800020000000100080001001b00000008000100756470000800010065746800"], 0x94}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x3, 0x0, "08b16a69cab02f580fc39da6f4fc5da16385dd5304fda8ac32a36cb6c85585c897add35292df32b7306e40ad918beb3b654eafd2a584f73a4deaa453e5ab749a", "21ec0351012c5a14ca20830a1cd1ac372e56b0d2b17c7dc80679199e9933f6dbcb7d345d4a935f59069d421cd1c09c5320e6d6c7b72244f6ffc61a5c5468ba2b", "3bfb76ddd6a020499ad401cb3c39baa3d7d05bcdda5bc067399e1866c1160843", [0x4, 0x1]})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r9, 0x0)

02:51:02 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote, @loopback, @private1, 0x2, 0x4, 0xa70a, 0x400, 0x4a51, 0x4100001})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x40000, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x1}, 0x16, 0x6)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="7a59cc59db78e71e7680811279147318", 0x10)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:03 executing program 4:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$FIOCLEX(r0, 0x5451)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = syz_open_dev$mouse(&(0x7f00000013c0)='/dev/input/mouse#\x00', 0x14b, 0x24942)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000001400)={@ipv4={[], [], @remote}, @private1={0xfc, 0x1, [], 0x1}, @private2, 0xff, 0x100, 0x7, 0x100, 0x7, 0x400000, r8})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000100), 0x0, 0x0)
dup3(r2, r3, 0x0)
socketpair(0x15, 0x80000, 0x10001, &(0x7f0000000080))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000280)={0x0, 0x8, 0x100})

02:51:03 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1f, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x301002)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f0000006680))
sendmmsg$alg(r2, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="3aa8feb4db32c5964726dd341b568549eedf089ea556493149e861b77bb6769b340c3a7cdd8cf161491e75e803ee08f81386e13527b02028873f20b8a4a8d1d83c44fbd24fd536fa8e128fabae3eb8bd1af677d19704daadad6e940266bfe2154efce3ee8a60955cae59da2aa9029b518e71a0c5ac3907aabee053dabe70c3023093a514af43f3330469f30662d8bc67c36887d5c8e481c26ce11f6353f983d682ea80bed6d09447a902a323d0f67e9f6018974480b04e67f9ad11224bdab7f4c3bbee24ad769163ef710cecae92ba03db14ffadfdf46f8965318abe1999e7c260f35aed1241feabbc736567ae036832b9b9a98bfcb4", 0xf6}, {&(0x7f0000000380)="e0908715b4948e962ad967583075bdf0fdbe54632b897401668586e12c469429065d4fe02f9b618f8762ade83c5f1f50b39957d74350f183c76c307983b67240927fab25e23737cf1a87be04e14fe18258c7fd130f4b65d6f635b7fdda27193a4d01c770e0c3caa59ae61d6011a10065feac37451a0d96acde87006bb036b066fe22f3c3c114e370ecfc0af47b450917dd5ca31f2414c0cf51020236728b24ecdf3974e3c3651a0a9bc8c4e70ae4ac9cd26941fdc27e4a5eb11d98083cc954f72a0a00ae7516ec42f703816f80c60fbbf477881a708552945df6e9d1436108631aac09049e5d5028a63881d450045b9eb9c9a6b2", 0xf4}, {&(0x7f0000000080)="1f5fa5cefc25f7e0ef40f1be57b01027142c4008edfabf06f62fdcbd92cf2a27c2c937e04653ee271657e10e959b18e3416ba55ee7281f544ae08e9d855e27dd0fd4a919a41b2aa89f0d2f512ed11181d89b4e2ebcbac761a48d00be67e6c216fc9c85dbde9258484653e88e3b4e06850ed5aa11eac2706f4018821c1ef529b1aaad388c74aa42eae9c7b527edbbb541a2e75a648d5d11", 0x97}], 0x3, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x51, "2123ba14a3cd483796004bf1fd5105cb2451d76c6d19377c8ae7b39c808010826d60c9c2b7911b30d5d000e0d7cc46429fa7f89e9878aed254b40349c7a45de2bdafbb772b84f00fcf35f9dd72b6e63a72"}, @iv={0xd8, 0x117, 0x2, 0xc4, "76657156210ee1c00520b9b07c00655612713cbd1c1da036fac981a01d7b9e906ca0e39263c2b5d650703fac71c1b93b61b8b40751279849c4ede3b0ede556d8b7de98224490a0509ff3f74119a35357b18586d59fa7376d2188d06ac1bb5ba2c7e61b0475dd559604ca3a82274be33a91bc4135141672fb745841d604dd0b5450484504a74cb9c4c308eb935b8b3d315799759e67634cb957b9380c5b20c8d4c9939e831e8d6a3dad38080f18d4e744d052124e880b0919038942f10f25050af5252510"}, @op={0x18}], 0x170, 0x24000040}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000001c0)="1af79fce716ac31d8fc7671aea0e7684abcd420b582f4eff76d0c61875182c379159edb12b", 0x25}, {&(0x7f0000000600)="624cb3ee5a0d9e4207e93ca818b8e86344aacb04d147da10bc8175640a4903ae44a6ff19df1e80597a9f3826b768e564cbed931137cbc29268432de0427f4b1dad2b", 0x42}, {&(0x7f0000000680)="1d9c584bd99abe28b7e01af8442c492efea0c89a2fc2edf357b2503e4f7b52cc7e0440e77538bee05283b6270dc3cc8e66bd18f77b8a1446a24187eb1ef2a7e59d22372178b64a31fa7b66a027133de8d1a8047391f143b45d85a27a043cedc17396678de226ff3cf37c68a0cdd54c5e7cbf85d4573ed58eafa675df130ceff2cb300025c7cceeb85d533c790e9f70f7161c65a9f14b6d", 0x97}, {&(0x7f0000000740)="c7c0e95462f1f22811d352841378b355ace444ef55d5a04f196c0532d0686aaf1cdc5df7a8e42f3f9788b27da8c5cecdc879f84dfedf575ea30e2b3a141585d120dfcf927fa152c7eb922ae23e26c2da1fdf197700f9b6ebc69c194731c450e0933620a1965bfe701f7525f3e957", 0x6e}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="812c7b85e96bb103f1544c15bd38a641aee28f50a770eca75198234611adcf1ded8f9636d0ebfcb4c98dcdbddde4595a111e2c6313dcc8df88f96e39bec588168781b6b93b8fc84d4d16cde17e0980a0bfa753732c72b956ddebafba116081a49129eb11155a6491dbab82126a610c8616cb93dfef3d5cbcb6f328cbf012624446c30c2b3624c80d446b58ebc244c2cf6e2dce99d825af46c355a60158ca4c70bd91a6393d0b221ca3f18d966066a2123eb0937accda2933a4eac7ada8292f84216567fec0a8cdcf1a5ae6a8f393ef55003231c377e162891c7ae81c75c51ebce053fb8703eef1881dbaf519ce3d528b765df43dd1d92b6f2a6632960f2caa258257f82ae38761e4ef3828b4dd45928dcb0d1713d01fa7d104e063b32a9d7048bac83159582fea88eb9a17b8172505d346513874735d04d168d29cb49bc6c9a5ac4a240b8a9a9d5fa7288eb702fe08714873cbbbc32e993bb2f7344e3c1d0ee722538f98e73399598acae8b04ca60a5f1503b537c531fe1507e0e0796bdd1ee51296fedffd64023dc0f839806ef24df7a50ea2466b73be4582872cd4bec92aa7925a73a9c9382625ed9756bf0816047aa11096a32ca1a2a75fc3092843b6fb93a883a089abd2ab6d0508ef29a55854bf3f7ebe205df85bd924ae20c9c67cfad1b20434843468f7f43cc5192364d0ff15f4278cf66e620565b0d225811384d21cd4ee2cfbe751df1a415a4488ef6dc96e1fc54d68b82598dd85da329e425b2d5434069b43ce8dc12ea704b34f2091fdf4816b2f73014fa6a9067b8926053716bc7f93a0c291b194fccac4a4b50860f18478834c00eba7ae614fbbcd5666b1278a9ec4f8b52774328b90fe0df287e35fbcc9b2a33709d3daebf2ad10f95d1bc3f8eeac3a8522c2e5c8a2d59ebd5dc53730033ef912bbc6438a362f31f746f709d4785cc8ddd533c10b5c4f69aadd3e6aea4fe6cea01c828f03119c52671f89ba95a48d21abfd90337e53e2d57489503c115f3c6390c7078e62612dd3df3b079c9b824baaf44525059f447d99e20d894c69fe819e0daae4aeba49e2c771eeb040bda69a61ca01917ea8573e6985e7b69611cc6768f9d6118484040908ecb21ff1ead387c40e1186f4b3376c82263231b12d8666c913253017dda9902028153e4ede477df23361f3d7c464fc94586358c28d1a74d0729bbd21bf63fd5ab3e1b38573dc71ad30884d8b9e997870aa9cf93ef298b6d8c9d5ce46366cf3b1378ff72b1985fb0bfb66f35cc5860965271e62ef0a492721ade326944e9b3f893a83276ae37b284984ac5925eab3c5e633f54e69524844178b0c6f6e7302909ea6c8ec268c3ddf7fb5d3b6db19cdf94d9e0e2ae8d09959c4e7ddfca63b5f335b4151a8364ea85d1b61f4c9444f5a9aae42d288ff42a925921568046a8727705258ac3831dfc4722a6746d10a9c529fa2d088f22be2cd3c3d8e6ba339de6b6166ad3be3493f956df014cb817f8a8cf432ae4506de316992a821066c5f1961583549a32d036331bbebfe7b1c2453a3c2b384f815544206d473619666588896897da7dc3674977c476fb8c37bd76319a7854a20aa21a5392ad96655212a1078cc16b206c94d72f833faa65796fded3b1f42d2c88debac85b46e0d4b0d9d62410f2f6b5e351f6f9de9e9b25e78235e123ff4929a75ace366c729352b5bba75a6801b4de51cd9071640f93f003efaff711082258928a8f03fe1168889ada1cdc7def2aabad122d77cd3dfe7aac2c44910fef0b90689d8398ca16fd72738537b7e8c92f43adb5d789e72036848290fc7d7901b2f97162281c5921247e9d5d41b39a406c1594388cf70efe83b1f9e228cc041d5effd77f4a87cf8fdb81c5ae4e1b760d46db6e2a1617d1386ed460c0ca496fb3a42d3ef9601e4d0c895e22ad76e366b34a23539d2fadd679e75f2140fb0c6ff0f655d724741fee44045c948ffdc6c2293376a1195f52cfd38eaec49d4627dfbf249e4b7f7d3d9c1471fd76e73a67d5c485811176b332a77e8cf0023d1025ed66793c321c23ae36e5b85708037865c6cf2d54620e8885414f7b182b6f953ed172bb846230f71beee09ce0e467567f22347121db4422deb4add7d7be57328d72d05110daadc6bff9d81c30e3e105f889a3874e0716c5362d6261c314c23064165bf8842a32da5bdb6fe0fd7b79c12577536e41bbda360604447e5fdc5eea215864314ec4213222835d6c537c5d981bf1c82279833c69c059859f28160aa3f7c66a3a6f6b5244b860f29eef1b1933415e953e77a04ce5a740f370e66edc72a0dd93bbc94601ca0371bf60a192bf37b112cad4a48a6b2ddaeeff90cc748d28cd09ed0d93e4943fe87d41f3f574c6336bab2459577e71b298ec4bfc23cfcc2176931e1406d655a72079dd87e3659ac688bdc7e43ca38b83f8153261e0047e3512ee1b7127f68c522b22e7a4dd2acc7722004c93181949607a5b89560640b34b18735f510a00861c7e25a58288b1948b537079964472c1a7a54e950e03b319c239f7c2cd3ea8c55d31b8b0b5177ebc2c9865cb2a5a51baa44e6b6f6fe4ed2b70e22da9bc00cc4ade24177ccd1939f92b6800831fee60e1a90f5081c8088fc0ee97fb0d689b0706d533e756f802ad4dc28cb0e5add81532dc3be8a77721801786bc53018eafd9d8693ed865620e33b0800cf149b95001d2f8c8f1f5615a83bb7b4bde71caac23c4f2ed5aba71567ab298aeca40c87bbe0aac0120ec1664b64f0fa31f5f418850ee900f9575aa2ed136af9839dd3167a405f38daa612cb93460972689a41dcb61279b724c298ef6600234f74c2192124145ef120eb196797a60e446e124eaee979676fc8ecd86dcfd8b1b20dcf8d07270c3c8b3ecb2a584c5c1ba78b9e9a5c850a66fde8b06ec06073b8f890915273f3d315aae7133c8e07703fafe1b115f9c8b48d6933ef850444c339a9316aedb8744ef2992d1ef548b707c769e386193ea9c37a192d76cb2abf995c9683b725b7fb1dc4cf296491a0cd4ddb1d8e8b979d80aef9ea7abc994e29b414d0e0fc1434a8a1fee6d8356c53e6d2dd1e87122987d8133f58c166e58eda81bc77d1400fb4de88d954c62f9d297611eba5f0904a023ce02c31cf3bfdb318df9805e384dc6f1d54695d0f3065c18fb43e78d2be5a687696e09753d0b02bf687c21b9f15e5898368ef27a61dcf5f38398cf4ed449b586a6713e5c53f2a71b3fadcc9f6b3a8c59604a2f63488af146991f01ae3ee0ffb6c827e4328174a60b1f9c5a78309e265943e49e8500ecf6f0843c4e6da47a4d1dbb9f5c7d962600f3acfe35fb3abe3978d5fbb3221c850ea0f7974c0de277a8dc0d515d5f38547806100bcfe707cea606ac33dcf027e56065c5bbcfb13b08a0f4450f0df5b35b5098c9017627a41303cb92bf2dfa170bae721e1c337ab7cbc21f955833f5ea406fff378885e26b8111095f2a43560dee76e8ae96b3c28a7c9bf254bdb18ca36b0c8fe523ab7b44a6dcc566aa4eabb46ad15b5914a5e36fc6fda0ca3e856e4665148fc98b50d8c6d535a85a62370b7a9e55967ae3b7f02bbc0a7c6d297c5d34e32360b62c37999f9cc5638152825f487a676d5a3f40ebeebcc2ed380059b4d8e2a9c28d48a73b8b6058a3bccba58ea3be2dda7bb6b2d42c5e598770ef56daae9fe366f2c9238a8f469c8e639ab15b3f2c9f7b6491351720259cc10f5ce841ef9361fc3c12b82906c2fa299fd6054a01dde94dd7da7489d0bd9706ad1c1267f703eb77914544d8c65237ee259fbd8f298c3bd7acb3ff8148f3af9f0469425cf2774ffab5b8af4a19834306febeeb15e54edbe07bae26ce440f6bbd30f0bd1ac2b09a607e67feff44d5fc5dde91b057c5cd67e15d970c8424be8ee7b50551ea65595d7cac9612b5a4b31177b0a8ac08b50ba371bdab63c20b6f42b6ec4ffe5d69c37c0db24260dbf11709e30a0265df57177a948f708b30ae4fc08376547f860f13bbe556ea9d8939a5ae9823cde14ccb24fba51664c5d31121f7c201c630d289b67d96569d60b42274f680167359c8a7949366ffc20807d444dd330f91f7055dd637cf192120a041ac7f0d1b3ec020dcd0e9fb1b3dc0e709f689b241840896cea7e8f8da2242b5180706eaeb4b911344ee047fa3efb2f943037ff37d821d43b53a7fe8d5d2bf3a3f826c858ac78b6ee20118478201c691c1b25f50685c0e236a6d44fbec4b952e8cfa0617e11de0d5003326502c4e1939f7e5ca316cdc9773b3265620e2d3cea097388a21a6d2ff78f603db6b88d000ca7176c2a6dfe4ae8659150adb0a338dcf531c68a1e12f95fc3be0ac2a946604eb588d195ea0cb8f193a53976fb82aebcfe78b05373db4f033e0e06f04f9fcddfd40274678c6a92c27b1efb4b520773d9ca856da422448c1ab70ef4ce88a1e8d9c603cf163a982c08ebbdb054993276ba7a499b86e9581f14f8fb533920e6a1d1f5d0489a70d74f3991386a36743b2694c57629a368df702bc44fc8254bf9cf67f03719e87ca42164fb338450738d77a423fdf91e39e2eed4c7054a5d48a1ae9df5fdc437be273197af2440d445a4a2acd64bbdbff266d961ff143bb1cc650c575ec23f0b333f375e7e8ebaac7a56116ef8c3fd3ffc11a6bc0ffef0df2e4e25507a446c78e8ae93ff1e0460e8114382a1a4db47db165cafa93c5250576792101c1cecec999a29e4a58bcd6412a82936549c144eae7f0611344d6a244f4f6b4bf008e7662ba3c8faf558d4e5d0bab0cb272b051aef72162a1e12355617260944938fbfb1db68212962b7efcfcff2aeaea7eb37a100b661f521796366f84ba1e6809e7652d2eb3050800534baa9a8cabe346b50bacad74eec1bece0f2bc9cc09958a7e4f24abfcbed99c62b282e8e2204128f40a01a4fb140acde446af44c930df5e970d12918595343b22b823cf05babb3b8bded96eaaa2a3f64bdc4f18822b3134b3ee7e2d733f0464b7da4c953f1915ed7cf30eec0ed516cac5fd5b4ea7685a69f2fc335171ee6e20fb7fd7d3c5a42c948a10dc5256165821f3088d8082dac9ebdcad14e61d63ee65011a10e1b21e5f8ecbd4e6bab783734a9bd3367d78abcd6d3f8b7647c497d4c67b2cd327c8c56546490898099d3c08956968b9e5dbbbd723e973087eebcff90af63e206ba5ee539c5554acfee6281ed21c2b1791652fd6330bccd8b0c6e5389c7b3d9627bf95ee4f84fcac5ad3a348f8e0c25094875a99337e0b746356a10673ae82c45c30f9a63de1489158e4ce6a4a8bafab1cf77fbcb155e56dbb27cba2b698e980326c24e873e84f7bb82376d4c3f0564a222912ca18400585d6d3ae4bb77cff4382daeb6788975e24fc2485eb49514a2efc323588295f1b7ad92e1514c9f31af4942621ba9a4994dfd1806f2ade75a14451eebf737c70dd8cbec57f814a75f05ce7cabda82ea7b89c3b43a383dfa8bc26e74287843bb2bc981abe3d7b6c36369adbde8f9b599d138b47523068d4b5791fb81a2dcd099d109712f2dd2df8eb67e9de1df5c624e867346e39d663ce2ffba4a98ca7b0226b2efe4f9d2080cba85d55aa24ca799777e6b4d921da3a0f3eb0228cec6ea67cc5f7a6d8ea72f8d6473dddfba149dd59851cf295d6088239c90ff524e08a329238ff0f236b7af9e937889ec607d1ee702b75e0c3ca89d348ed087e4a50d43ecfe9156e2ecd3b77380f9ae0c6de1c597f23ecb2fac5a56d19b6a8c90f9c6075d5d7bc0a21bafe224e0be423111c736e7c2350b075ed38d2f", 0x1000}, {&(0x7f0000000200)="fbdc4f57041a76c366566c49a4d86a9605a1ca9faff4b4a4c37616975dd26b518df02fbe25c1", 0x26}, {&(0x7f00000027c0)="f6a48184ba9f55165f05865012eb19896efd4f831599185424438f99e55d0650d25b05154448d5ce55c36c2572a6962fd395b0f20f178e87cb8d7e1a2c1fd4d41d2284b64d840ed66b7dc367c0741d9b5d3106b1c9edecace45f227b922fe2e796", 0x61}, {&(0x7f0000002840)="53c11e7fb5251a4ff755e0", 0xb}], 0x9, &(0x7f0000002940)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x1}, {0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000003980)="29aa4674869eab71429efa0c32df10f5761cd7ddc32fa135a0ba8244d6d9c0f8f042f0ddffc7c1eac13acb192a0c74514fd1d072d5060246af8db0f57cced50212b2ae0bc8853c2361ba344ae802e8cd40c51cdcc587d32e01291fa7541b7fe69030859069364d53407a50e203043f3e09264d5a5a7105736aa1d22e307a1c20a0343f402b6f92a92b4072f5cb3e5ac63671217c24f612e261e6c8236c9788d94b61181c30b900de25e9", 0xaa}, {&(0x7f0000003a40)="ce508ce0ada93d0f4dedd26b1e06dc75fdc5bededc2f272f634bd71b8796dd13902bad5631fcf2e93203f9d2a72840a4b087655fe21008fae375df2f89d1e51b4d268c82a74295ae79b24a16dd9b2473f129918204f624130dd47820a45b04e4b478ccacc598fedb5cc24aa4f06c9e04484f05f247e024ef132dda74f64f71c8bf5db54b23f0fd423c6b3aa98a48925ba189a8", 0x93}, {&(0x7f0000003b00)="e64c4dd79a56e79f787dac1f493aa5bc705b639b107ab85f0b00ec7ad5a3fec44a4df988ca321e6058f28a1676ebb61b03c5ae283e12a61e13da92af4e58927493b10bb7fb0f79f2bdbf3d11030e89e291c3ca2bfbdc6186544e9245fdee90ea9d264b3b4e6ed65c48a1bb147fe74c6c272fe640ddd8e7e76141a519dba8475f825800cf46ee98d1222d15eb856d65be5611886e37b429fc05e5be873b3ae78f9ad09227449544846d3ba66dfdaf8cd83059d943846b81f0e6c4c8bf117d32a554c46a6546c6ae90a0e6e92cf0b526757a629170c82ca9e1ab6d881c033dfd65", 0xe0}], 0x4, &(0x7f0000003c40)=[@iv={0x30, 0x117, 0x2, 0x16, "865bdcf13aa2efd2fdb75f8170e85660ef15549aea38"}, @iv={0x100, 0x117, 0x2, 0xeb, "b8b4957b27e61473c9b7d3ecf2b0b64d7825d32fd008f9cec428b7795649f38019420f07d5deae74c492ea10e1f0f27bdc887aee2f2884b4633631b38207b9db931bca8698e978debf49204ee3ff2029044a99b4516688c06e6e8b944024b5bc95ab1600ee8cb510ab6f56366085c20a6daf24fa7a3d788d7db16421a2a5b06cdcd55e7d3a805728caeb6580e32301f5a2baf35d743ae8c1c6019d49368cb9ada6e9c5a4319978271ec8443f84bdac5c64b391e274882a5e68f104c37fb85fc8a908ea59b8686ecac284b51555a0bf2770b5a1b23cd164cd8a069eaca80bcce44ea4ddae688b50c286f53c"}], 0x130, 0x4}, {0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003d80)="a43ec7ff8d799f02d1e306b243f74f18df31d530a2c177bb606781662e48c53ec4b0983ca9fd7e75b4ad718b32a8a7f0ac55d2a9dd3046030e8c7ef59ed2517acf1a13c9da39", 0x46}], 0x1, 0x0, 0x0, 0x40000c0}, {0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003e40)="36c14173c1701beaa9f6d6bf000f5197704ea84e2839ec1babde7ac9722df10fb1106845141bac5bd10c03838755baa9acc4ac5bd9e6703b7a978d5bcc70a28386bc4c27763ba47d15cf3bb5768954c6ab5884b3da7e863f", 0x58}], 0x1, &(0x7f0000003f00)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x28, 0x117, 0x2, 0xd, "fbfe7b6c5a893d734e96f98bff"}, @iv={0xf8, 0x117, 0x2, 0xe2, "5e87a709ac19436604ccf0d9ef2a379050552c0329cff0fde71fa9c8b571f92b6a35efb81c8a3115708a3b602c4ce51db54cc86cb4c3d4705ac4d4c0e1d37a0d8b28ac02a5fa774f8eaa145f8b867bbb99d01799f962d2f5ee05bb46d0948e8ced54507f25d6ee339c2a27d41da370d39a8e014031fa3484017406b17313ce67012af705047d28e9d2ef32213c84fe29943427c1172e478ebae35e6e51801cd6b53c794407dd59ad243825e380687947761250f16572f4d2fae3b43cf8e590bedc0aa705bd3dc1fe7e5f10d0a9d8d54861bf101823bd815169efe83a281b70352be6"}], 0x138, 0x6040}, {0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000004040)="1a7fd20302ac48546aa1", 0xa}, {&(0x7f0000004080)="a76dd2a3ba0e007ebc461d857909a970dc380b2a4fbef3d3e1a24e5629", 0x1d}], 0x2, &(0x7f0000004100)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4000044}, {0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000004180)="d3140cac398181ccbe7866a3565ca56cf31ab0c624b3d61837b3feb844eeea865c55cdaf4e02921c5eba5df90d66f359785aef2bcde1ba17eacf0582852fc19621843dda", 0x44}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="fd7a6bb091efc3f7ae63aa82588887187722d0014fda90f9039ea13700ab8884bf89acf9db13a1f8598bc75830a3e881f98d92abcfac0cba1982b5cc560f2e86137caff619310907f393139b208c008872e9900c324484bcdc7691155399575c1a5d330ba8566846496ba086949e0b93a06c42bc70a995d719afec6a19bf", 0x7e}], 0x3, &(0x7f00000052c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48000}, {0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000005300)="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", 0xfe}, {&(0x7f0000005400)="683b520a825b85966276c2be6c", 0xd}, {&(0x7f0000005440)="5ef87ba6739ede7b07e73a06aab50a185cc86197f96cf3a31ada2e0b7c6c01629c1df2dc165178f66eb66f1dfc927f45c7ce", 0x32}, {&(0x7f0000005480)="182f0207cdf511e9d8ed0d74f3a2ed3155a45b3c7e39e1e91fe8907ba0a7cadbb9058b8fa43e494c57f503f67ab9285b5051ff4adbeb1627dac0874eff1ab09fd955d90a0fa574249accbb5e3f59af2d05e61350535495e3908f5c711a676843b7dd292f9ea23daa32f0e2379c2802390f4b83e344525bab5c9ec79ee7976d0fc3385808dc8d21865512376dac4220a447b9c37aa0def6dd3445f371f2e13213e6f6b8037d8de512f1e6cfc9363716e353f81c3ffdb27b63e7f5b587f4346c844634805c006159e98c0da517702ee61d1e7c1196eae8ab4f7997eeb61bd5f13889f178d26302973ab65e61", 0xeb}, {&(0x7f0000005580)="cd37800191aead7a9a4d38dcabf77337a2c9", 0x12}, {&(0x7f00000055c0)="ef03c276a568b13a625af757e3b9db2eceb51ab084e75da19440351c227e182871476100ff7bd72ed3dbd439e94ba49a45fc3ba1b6fc9f91", 0x38}], 0x6, &(0x7f0000005680)=[@iv={0xc0, 0x117, 0x2, 0xa8, "a40b5a17b992926a9020357822d5b7b137dfa1100529088856bf3a6aa7cec0b3962f8aebd1ac3cb5ff7ecec5e83753b8a19fb24c3481a8139abb2c62a1852588ca06dc7b9a98a8a868006c712e444392ed3374e4c86418145418da6ac7f3c20c5e0b0d7decaef074e8bda7ecb9f0e6392c05872d1a74c3c1461946f2b48028fc4ee25c5eaae6f10d1376b02a5c0aacbed79110031b07db3236c339d46af347591104786bf81aa168"}, @iv={0xe0, 0x117, 0x2, 0xcb, "4a8d84e74504ea462ecafaa3f6de9c400bbe0d96b0d77d4a9d7eb6c157b315c6e042b17f39aee686cc3d586b19761a76b56579b368503ea4907487152f1abc9a0fe6a9ba01f9200fac4d0bb60a9334f73573cea6dceebe757307b80db75e3bae5c96df785d9f12c2c934b62411af58ef44490eeee7b33eac9621ee02f696cbb3dd58d923650ed2aec3ccbbcc24457a1f768fc3f159433143f19681d99e169136e58bfdd5768714e1c891c173692fb6ff8721cd1d996bf7431958edffe4cfb3583419f4f9a920ae5f6212cf"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7f}, @assoc={0x18, 0x117, 0x4, 0x3af}, @assoc={0x18, 0x117, 0x4, 0x51bc}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x5e, "47976ccde517df6d9e25a15ced6aa3707bf40f3b001c8ca45761d64ee65bcc82ad7ca16bdefd0868d414dcec89c6a7d37822a1618fcd167bfc19e29eb70d3b0afb4cc7f8b4ba0ae7e82626e579bf8d8aa59b8297307ae7298d3cc300ac1d"}, @op={0x18}], 0x2a8, 0x40004}], 0x8, 0x39c2806bb2f0cfba)
write$binfmt_elf64(r0, &(0x7f0000005b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x7f, 0x4, 0x7, 0x2, 0x6, 0x1f, 0x21c, 0x40, 0x13e, 0x3f, 0x9, 0x38, 0x1, 0xfff, 0x1, 0x4000}, [{0x5, 0x1, 0x100000001, 0x0, 0xffffffff, 0x6, 0x2f, 0x800}, {0x60000000, 0x1, 0x9, 0x80000000, 0xffffffffffff5d4f, 0x3, 0x1000, 0x972}], "4b37a403b83b9d63da98e385358248d89e32a30c9a87f84a9db0712a7526e20befb22dbd656606f986cf45cb0e02ef01591b3cf961f598e3dba934f35221a7dd2b5b3be91b64f3e8643697c0fb4e0ce77e", [[], [], [], [], [], [], [], [], [], []]}, 0xb01)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000006640)={0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x1114c2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
fstatfs(r2, &(0x7f0000000280)=""/233)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x800000000, 0xb4940)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x5, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000280)={0x2, 0x0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x44001, 0x140)
sendto$netrom(r5, &(0x7f0000000180)="9c3a1688d942e8d2808922e5e3cf259017f241a40d093254e487571e1d0587f2ab58989147b93c10d1570297c9e807e3611913f20356307b04c91a846dcbe0b23de75f69286a847a161b0c637e2574a6f41b3bfc5e0dbf298f0b8c0f239c86913babe854e56437bd66bd6f7284a228803a242259eed5d51046140967ffc9ca8512ba132453caaf0bfba9a86c6a4ab12be51f13d58a320f379daf3c35406e69565e8f8bc358230591932274e15b29f1", 0xaf, 0x40040, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 0:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x1, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x4400)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x5, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x7e36, 0x3, 0x1, 0x0, 0x5, 0x8001, 0x7, 0x7, 0x15b6, 0xfffff48a, 0x400, 0x81, 0x8, 0x9, 0x1a, 0x59, {0x2, 0xc1e}, 0x40, 0x7}})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0xfffffffffffffffb}}, 0x18)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000400))
poll(&(0x7f0000000100)=[{}, {0xffffffffffffffff, 0x1000}, {}, {0xffffffffffffffff, 0x183}], 0x4, 0xe)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000340)=""/184)

02:51:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000080)=0x401, &(0x7f00000000c0)=0x4)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = dup2(r5, r3)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x804)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x440400, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x7)

02:51:03 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$CHAR_RAW_PG(r1, 0x1269, &(0x7f0000000080)={0xfffffffb, 0x1b9, 0xa1, &(0x7f0000000280)="7cc703902d76385b1a1ddd27838b9622295f2160cf7744c0728e51c88cdd3773778b63f3c4671c1a6d42c3834ba48cceed4c4e903cf8b9464716ecb5617988d007a310188f3f8156d1c111d7162f68e385aa3d4b4616eb474b3d11130c892065967f79d6c3a2d633d7c4f33516520a7346ff4d38fd4a91921d08385788078c62f788e3799a29b1561e5d3d5aaf7d0a4ea8e6d7bb62a575584a03a4e88cc9aa4006"})
dup3(r2, r3, 0x0)

02:51:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x81, 0x3a, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0xffffffff}, 0x16, 0x7)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x7)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000280)={<r8=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, [], 0xff}, 0x629, 0x0, 0xff, 0x8, 0x5, 0x4}, 0xfffffffffffffffd)
ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil})

02:51:03 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:03 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000340)=r5)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ee66937bab232a5bcc49e92af135c15447f67901234b0000000000", @ANYRES16=r2, @ANYBLOB="310400000000000000000900000004000380"], 0x18}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x1)
syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0xffffffff, 0xa0280)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000003c0)='net_prio.ifpriomap\x00', 0x2, 0x0)
r6 = dup(r1)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r6, r7, 0x0)

02:51:03 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x168)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x181000, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={<r4=>0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x2, 0x2005, 0xe2d, 0x7, 0xc3, 0xfffffffc, 0x14}, &(0x7f00000000c0)=0x9c)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000340)=0x4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @local}}, 0x1, 0x1}, 0x90)
r6 = dup(0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000380)={0x5, 0x7c, 0xf83d, 0x6, 0x7fe000, 0x2000})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x82000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x200, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f00000000c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x0, 0x400, 0x9fa})
socket$unix(0x1, 0x1, 0x0)
geteuid()
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000180)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0)
setsockopt$inet_dccp_buf(r5, 0x21, 0xf, &(0x7f00000000c0)="6d5d08f046b74ebaa72bc98cf7123e3eb192942fa8894a7d9463ed618b7a5db72be44af99726b1ca190f01e998b521ae9914801bc0c46ed5aa9a6f46e4aef5952c1e936a5e7296629145e855d4714f47513508c6232ea17d1fac9e47c7", 0x5d)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x42100, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240))
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000280)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$BLKRAGET(r5, 0x1263, &(0x7f00000000c0))
r6 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x105440)
ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x2)

02:51:03 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:03 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000080))
r7 = dup(r1)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)

02:51:03 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
copy_file_range(r3, &(0x7f0000000280)=0x6, r8, 0x0, 0x7fffffff, 0x0)
dup3(r7, r8, 0x0)
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f00000002c0))
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x500000}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:04 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r0)
r7 = syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="f54e01393694a7728d4ebe7c76b68268774dc5b2344549a793c8098fb13c09ae5d6683254346a56853437656e3650c106876255606b17d27c10d5a81e1e7a9a139f9b5f7b9c58b194272d906d4ce7a3c86bf843e041a4b11078cc2b30c19bae1a634ac7c61ee3f53e3e27e49cb4fed5c16830d9eaa435fcfa2fe6eaadceb9e530f33c321f29e24f2cca2ee2269c610e0c889361591e54c16c350d5be83f9a476d92c2adee6", 0xa5, 0x5}, {&(0x7f0000000340)="fd959064ace75c4d4c3478597c2c512ac8c2f1f05c3d094a450ef32fa22bf08a60de83d7e578df0f4a69b08e17d653a0f635c4a3ac40e9a347cf5fb4e2e4ef217201f9cdaab0ab4ac1abc1ebbc8184827155fd7ca913016e1f23d68068ff561fd331d6066b700d1d382c8e03cddc14a1a290b857bd292d6ef445f620372d98dff8e615086f67b706c86f63ec7b5add145ff1b63d12945cb52d2cfe3a1a4052c35b5c5877a1f6163f4d3ca671c3d3f4ef73281b47ddbb71a47fe05dbb54", 0xbd, 0x1}], 0x804800, &(0x7f0000000400)={[{@uquota='uquota'}, {@nolazytime='nolazytime'}, {@swalloc='swalloc'}, {@logbufs={'logbufs', 0x3d, 0x7}}, {@discard='discard'}], [{@permit_directio='permit_directio'}, {@dont_measure='dont_measure'}, {@measure='measure'}]})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000005c0)={0x60, 0x0, &(0x7f0000000500)=[@free_buffer, @acquire={0x40046305, 0x3}, @release={0x40046306, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x2e, 0x0, &(0x7f0000000580)="87c0dbd7c4c456f19079b63d0db5895d61348a2c193dcfd687166763685babb31d1fcf9ad8a813d6f667ca71bb42"})

[  267.766560] XFS (loop4): unknown mount option [nolazytime].
02:51:04 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x70, 0x81, 0x7, 0x1, 0x0, 0x0, 0x9, 0x40, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffc1, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x10, 0x1, 0x1f, 0x7, 0x5, 0x3, 0x8bb9}, r1, 0xf, 0xffffffffffffffff, 0xe)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:04 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0xa1ed)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0})
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)

02:51:04 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00')
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}}, 0x0)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @multicast1, @local, @multicast2]}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', <r9=>0x0, 0x4, 0x81, 0x8, 0x1, 0x21, @local, @local, 0x20, 0x7800, 0x8, 0x5}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x138, r5, 0x400, 0x7, 0x25dfdbfe, {}, [@HEADER={0xffffffffffffff24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:04 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:04 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000000c0))
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4)

02:51:04 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r3, 0x13, 0x0, 0xbb7, &(0x7f00000000c0)=[0x0, 0x0], 0x2}, 0x20)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
r10 = signalfd4(r7, &(0x7f0000000080)={[0x7390]}, 0x8, 0x80000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}, 0x0, 0x3}, 0x90)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)

02:51:04 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
semget(0x2, 0x1, 0x133)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8)
ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096})
accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x0)
dup3(r1, r5, 0x80000)

02:51:04 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000180))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:04 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:04 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:04 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000080)=""/96)

02:51:04 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r7, 0xa315)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:05 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000080)={0x3, 0xe5d, 0x8, 0xcc, 0x4, 0x7ff, 0x3})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:05 executing program 5:
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:05 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x95f9, 0x1, &(0x7f0000000100)=[{&(0x7f0000000540)="2e74a595c50032fee5521bb4cfab3fa43ca64fbca5bcdfac2637a77572e7f2505bd89e02c2acf3796de415e5bf0da54153250bae673b3bdcbe0a8b9d71a80881060d981fbdeaa17a242449f61726669e62c9735ec686beacfb97db53ee4f4c964ea22b3065bafe60c540b00e7d0fc1784b04875c5ba8728af18bc3462b123db5497df9b3c6c2b116a247059a818c76234a1cc3d4d861f3adc6384a61bb3f546949b722256d080194", 0xa8, 0x401}], 0x1000000, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="22000000083cec0091c8d769c70000000000000000f089e06cffffc4e1a527a1386999982b747da1953acca6b5afd140f75bc39c3e88106b8c06903304339f9a7b6c887ae79443671d0c8e4183b47ac71f18abd68b80fe9f24742d4cfbb679dd34af4b7a3ca6eb85b4cfefa3b100786d148a272147af4f27187c1125b56e97af00730dcd205af2", @ANYRESDEC, @ANYBLOB=',obj_role=/dev/dri/card#\x00,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',smackfshat=)$^+[-,\x00'])
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000440)={0x1, 0xf3, "5d0bafb50244c5b06e28ccd77cc0271ebb240c200a50f85651640b5f1ef568d814d37307a6b6b791c144c3c8fb02f312f71c6516a207eb623b8e348e20de6a8c257d0beeac9e12dbbeb14529a0d93c5f59679f110a0ed46776491b773675a547609103ddfdd5185e6ecf3af566379afde0cbbf6793922745731fc61565595d0e9b2a126097eedabc8ea5685380eb8b6b0eba3c877414cd26b174367de15e6092a9a8618b78d2825c33604f99e52613680b4ba7fccd72360076b54a90dc4145fe18eeb94d5ad6d4dda34dfc896466666fdeb0d31622894fc2b15c8519d3f1e776e385a80aea1a17b96d29fd0bb29a0f9581aab3"})
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x90)
r4 = dup(r1)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)

02:51:05 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100a})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:05 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:05 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
recvfrom$phonet(r6, &(0x7f0000000080)=""/179, 0xb3, 0x0, &(0x7f0000000180)={0x23, 0xfe, 0x2, 0x3}, 0x10)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
msgget$private(0x0, 0x81)

[  269.207971] hfsplus: unable to parse mount options
02:51:05 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x123ac0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x40000007, 0x70e16817768abf86, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000340))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x0, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r2, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000280)={'broute\x00'}, &(0x7f00000001c0)=0x78)
r4 = dup(r1)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2900)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r5, 0x80000)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x240001, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)=0x4)

02:51:05 executing program 4:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r2})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)
dup3(r0, r1, 0x0)

[  269.269311] print_req_error: I/O error, dev loop2, sector 0
02:51:05 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:05 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000005, 0x21, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x189800)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000040)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
write$fb(r2, &(0x7f0000000280)="0eee33ec2c54a1e5cc4ed6ac66b2855ccc6a11d67ab7cbad6d0438b0ad5610fbf6bf9c926368c68076e43c3ad741a43ac475c316e18e5874c08ca36a23047b72c60ca7e56c5e4a87b44419b443bdd7861c6c119d6245038753784caacaf45c509a822d05dfd0651b29488a32288221c209b98a3290a665d47640fe44285a68d8b5a579086619dbec553bbdbd5b48926c742b1c364616", 0x96)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
socketpair(0x8, 0x3, 0x20005, &(0x7f0000001400)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$inet6_udp_int(r9, 0x11, 0x65, &(0x7f0000001440), &(0x7f0000001480)=0x4)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:05 executing program 4:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x800)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="45824e3087fc4b43337aad8ef48fb9cfedcc90a02cc97eba4da4b90f574fc256ca6472c4b73c3a468f36630c0ee0476c28f588da9e334db5b9b9639ba62bef52e690ae4de55dcb6c2cb5ce1ab1c81bb05abcd6d87e4ac0f9751d574e9727c8995332fb6ed8c70cfaf9e66f781b38341cb26c80d4b058ee6a0bcc2fb1cd92eaf80560a5daa81792dd2ae7afd87c21354c76a5")
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0))
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
clock_getres(0x4, &(0x7f0000000380))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000340)={0x2e5, 0x7, 0x9, 0x3efe, 0x3, "22c6a0d4dd2cb77b49f2e422b4c4408dc26d5d", 0x1, 0x9})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
r7 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xffffffffffffffff, 0x80840)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={<r8=>r0, 0x7f, 0x4, 0x7fffffff})
ioctl$KDSETLED(r3, 0x4b32, 0x2)
poll(&(0x7f0000000180)=[{r2, 0x6005}, {r1}, {r7, 0x1047}, {r8, 0xc1e0}, {r0, 0x1}, {r6, 0x4242}], 0x6, 0x0)
dup3(r3, r4, 0x0)

02:51:05 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x8, 0x10})
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r8, 0x0)

02:51:06 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x1f, 0x3f}, {0x4, 0x6}, 0x3ff, 0x6, 0x6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:06 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x600, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x7, 0x4)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xa000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

[  269.996720] hfsplus: unable to parse mount options
02:51:06 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r4, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, "f3"}], 0x18}}], 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:06 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
socket(0x2a, 0x1, 0x6a86)

02:51:06 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0xe, 0x80000)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:06 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ff, 0x400000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
r10 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r10, r10, r10}, &(0x7f0000000340)=""/243, 0xf3, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r10, ':chain\x00'})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x207)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:06 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x1, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$KDDELIO(r2, 0x4b35, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = fcntl$dupfd(r3, 0x0, r4)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x280, 0x98, 0x1e8, 0x0, 0x1e8, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x13}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_bond\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x410000, 0x0)
read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000180)={<r11=>0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x1}}, 0x5, 0x4, 0x0, 0x0, 0x7}, &(0x7f0000000280)=0x98)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x1ff, 0x6, 0x200, 0xfa72, 0x80, 0x5b1, 0xfff, {r11, @in6={{0xa, 0x4e21, 0x7fffffff, @empty, 0x1}}, 0x9, 0x7, 0x1, 0x3, 0x6}}, &(0x7f0000000380)=0xb0)

[  270.131844] ipt_ECN: unsupported ECN operation 13
02:51:06 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000000c0)={0x8, 0x7})
r2 = dup(r1)
ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, &(0x7f00000001c0))
r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x200100)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = dup2(r4, r4)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8)
r6 = syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x7b, 0x9, &(0x7f0000001940)=[{&(0x7f00000003c0)="406e2e91906489064282ae57cceff090d0c15df5250a3c20b00289328eb322f5d14c39211cae0316258144eecca4cb989651d860f0193de0e4c655bab8579a8802041dbed649f78da7c4e283285fc6be44636b924eb8df61724fcdc23dc2b80626f9c95743573718779a07f49608059122ab9e549eadc506374d56d2b805a590333ba55d62db5d269b2162319043e49e1693a263bb49f3eb80618dedd3ab77f0707a7feca539d80d862a", 0xaa}, {&(0x7f0000000480)="bd9974265b4349de320311d63203a2e1a73d1c6515a7fb8630e92f3b4c53f8235d1a2855a7b3cc288523bab5ad3a8e3bc3327dbae7f28d5c8e7379301bd06b3f4741f1279aafa823e7e1ec09718329123b00159785ccb76bab320f4964749a9a3daf01042d1aeacb3d8eaeb52b7f966441d1a29b40454823a68419fba403f798e209825434a4c4cb2268469298de70dff03f2da9c06dcd00017bb4a46286e382be7928aea9160ef5dbcc0d5ecd90bad744455fb13a0f29e115fcaadfa8a540d81c11a174db8545fc2445b1fd582e8446e7be32ecb0f2e971ab312a27a37da5183c98bcf72890ede3", 0xe8, 0x6}, {&(0x7f0000000580)="713e9c06aa2b23965c9049e59279fdd043454959e2b544db4dfbc3071b0c69678dd55ccb4395bd857faf736c093f2b7b3fa776463a4484fa7d271be22f34fcb8fbfd5187635d9b9a906d47c357a9125458579472f2a482f40667f36109603ec615cd4e1059633829c13202ff04d8764a3274d14e1f7ffd253d4a3ba59ebd117d16cad97b93418d3703ebba1e6f6fadce082f3b6d42a23cbe309c06b5c782", 0x9e, 0xd7f}, {&(0x7f0000000640)="8106f1fd4af4a26013f06dc8e574837795e1c77e4cd00dc752b0500a8c38b05890a33398fd4f5e617c35396b6aee5bbf2c6a478a5d029e768d123e2d4f78f1aa", 0x40, 0x252d}, {&(0x7f0000000680)="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", 0x1000, 0x8}, {&(0x7f0000001680)="6be4ad1eef4b5dfeca813cd7b3c0d2a5cbcd416131e294e02f120bf082b38054e8806001eac0c032ad2addc6c1b9fe01b0d5fcaf675cd25a8d5cb1b376cfece01c5c0543725e7b9ff115211316ef0365fcde188f1ed6796a54741d4135e1ef74ee2de26ce944ec274f94f6853d7e51e639b447cbe69b8dfa2245507f51f6e6742297b61ce887199e353882d9ec1c6a56401c3505cc4434bd900032eea65965703e5c3b2ae00b6866730b3df451fb473d52d04408", 0xb4}, {&(0x7f0000001740)="f526c8cc459adc20330aac39a63261abb548f5a8238c294d7df2dd3f52fa8dc8ded0bce54885a78c036e311bad24ec62f2466bd7b45691c876f50cd37390f020ef1caebb41993d949052ba10a1ae920c03365fb3e36edf2971cea13e1ed1d88293b8a2066b20e3417fe1eb08a6bf6d3eafbb5cfa645c015e7cf7bf880c57d40fe38b893f931fce59fb5e7dc5d46ab643b7234e66599b5832b6f922f52eebcfb3b2f73e3913ee7073b5e3afc71f8868f965d4cf47edeade2f51ac499f15cbdc2ae18bb80fa527adedf299e1c4bfe12721c63b410043f7e3d2", 0xd8, 0x1}, {&(0x7f0000001840)="a39cb4b7eeb659dbfa1925bf91092b6d51d72ddcf2f4a5d4ff25964d24e45be634a4b71f918d0ab80e8bf4103bec6749bcd1bf35a1e0cd4b1bb692c69afdd6982d4bdc1b3d6e9622affcdb4d9246f5bdc9a8c02bacb20ea7b62721a3d20b68fb51792a622d0f7b14967522324e45bb51ea46a056b74c21eacf60bbb0ed7368ee650c925ded7b68aae5", 0x89, 0x1}, {&(0x7f0000001900)="18d7e9b06394519568dd292d50491d164e02e84f0349e0426c", 0x19, 0x40}], 0x400, &(0x7f0000001a40)={[{@nocompress='nocompress'}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@block={'block', 0x3d, 0x600}}, {@map_normal='map=normal'}, {@sbsector={'sbsector'}}, {@mode={'mode', 0x3d, 0x2}}, {@map_acorn='map=acorn'}, {@nocompress='nocompress'}, {@uid={'uid', 0x3d, 0xee01}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel='seclabel'}, {@hash='hash'}]})
fallocate(r6, 0x14, 0x9, 0xfffffffffffffff9)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
write(r7, &(0x7f0000000280)="a92e49f9bc750af0d2cc166833082bdba431f419ffe1f41eeb564a7fa3addd1d6be288d2f617d81d972d0ee4adabaa09c2257fb5c41393971145236b74e4d454ea78ff87095c1699c6b590bcebad1d8556f6b9d22809634770daa27110e858a4a5525852d5ced9f50f0b033f7599a0bf25a1a5c5ed9e31ce6e624135d04169f869f9789cc6cf081ede6f5381a1ebf800f9af6402daf46c3a07f3e6c444c19f9df4651aca1cd03f74e99b02790a64ed903023f5aa8d07ce683c9d79190f1a1d17ce05c70962964d09e8775985de8f738f74ac097b2f9ccc913d601c191f7d90c1ba814f72cafa9b9f07", 0xe9)
setuid(0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08007a00ac1414bb6bc55585b5cb7b062da896c5daf949454258af7658579c4dba2a647b48cd2d643860428b59f7feaf32f85dba3530db408f67ef62b7149814875d6cf682d0cf88968678a6338686195f7a82dac0f407381513519f2d9ea810be9253016f85c650258005d6a9ccb1e56d20225fef753211140000"], 0x98}}, 0x20040041)
statx(r6, &(0x7f0000001b40)='./file0\x00', 0x0, 0x10, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001c80)={0xa0, 0x19, 0x2, {0xc80, {0x8, 0x1, 0x4}, 0x109, 0x0, r8, 0x3, 0x6, 0x1f, 0xa5f7, 0x4642, 0x3, 0x7, 0x4, 0x7ff, 0x3, 0x8, 0x5, 0x7, 0x101, 0x1849}}, 0xa0)

02:51:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:06 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000050952600010103000900000000000708"], 0x14}}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r7, &(0x7f0000000140), 0xffffffffffffff68, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xd)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r8 = dup2(r1, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x3, "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", 0x1f, 0x1, 0x7, 0x3, 0x69, 0x81, 0x1f}}}, 0x128)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:06 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
r10 = dup3(r6, r7, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r2})
openat(r9, &(0x7f00000000c0)='./file0\x00', 0x80402, 0x12)
ioctl$ASHMEM_GET_PROT_MASK(r10, 0x7706, &(0x7f0000000180))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

02:51:06 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

[  270.269603] print_req_error: I/O error, dev loop5, sector 0
[  270.280749] print_req_error: I/O error, dev loop5, sector 0
[  270.286862] Buffer I/O error on dev loop5, logical block 0, async page read
[  270.294605] print_req_error: I/O error, dev loop5, sector 0
[  270.300377] Buffer I/O error on dev loop5, logical block 0, async page read
[  270.307847] print_req_error: I/O error, dev loop5, sector 0
[  270.313755] Buffer I/O error on dev loop5, logical block 0, async page read
[  270.322280] print_req_error: I/O error, dev loop5, sector 0
[  270.328045] Buffer I/O error on dev loop5, logical block 0, async page read
02:51:07 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8002, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = dup(r0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r4})
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r8=>0xffffffffffffffff})
r9 = dup(r8)
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc10c5541, &(0x7f0000000200)={r11, 0x0, <r12=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r12, r10, 0x80000)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f0000000080)={0x0, {0x6, 0x1532}})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000640)=[{&(0x7f0000000180)="67f07d69678ebae820146ec6978db260730c699142fabbe6a68ea2c6d0bc16767b532e03a49546b8bc5e474b59bee14da8cf402f05080558f6552dcd48c86799a0a13e65f3abd1ed9c82670f8f8745c9e5", 0x51, 0x1ff}, {&(0x7f0000000280)="87738c075be7f866729f823c1c8aa96b559d626950aafdfff36993c55916c35babbef641f3deacd96d3c86f33bca0c087c52d92398241e7d02870d77a3791b623ea9a6ae1e633243b369585a93b8103d795cfaf4664c39472ec6debc3389335a4133d443718eecbe27a7397188da557c1e4708796c74b96393b3541cc2be19acd72f80ecf4a1c3d1c78a21486e97f5b81b7d81d75dc13d8dcd4ac695a75410fec1261bcd08abd0fd0d905850650be45b3e1f2940363a15adb45bad58cbe6f42c911b1d060277fd7980760c52f2cf6a2c8dd5", 0xd2, 0x400}, {&(0x7f0000000380)="82061ec520b3367f259bb8f6edc8b8f69ad305d1f47cd81d8bbe52f2013b85c1c29ac1293e731391e36f4d9de22aa1bbad683245267706948ece06", 0x3b, 0x7}, {&(0x7f00000003c0)="35b6108cd1ab732772fd8c55248464f4388805475ae539b8f14518538b66339dbf9aece340c6de48002b6ebec30d13cb697f0c35ae8de4f37a942c564fc149822942b8d9fd8ae97c49f9b567c3635fd389f67b78884b0c9ab39f0690a148a3c825b3403886fccc47", 0x68, 0xffffffffffffffc0}, {&(0x7f0000000440)="58ad373a868d28a06475c30a954932a65263adea78d9efd51340884bf56738428b151784b8f6f5c93506fbd5b48bed2175bb2e59d2607e8aafd298fd7f97aeb98d9cd4a5fdefea68430a8865e74e0ea7c4a2dc9e94e92c76622ba79a1ddbeedd2ade6ce2c29c583baee3e87372ce6bea1e0bc177ab5d5bb14419a35af2b9ef295054a94a52e2da287121ae11ef9333fea82418ecb41acc644ae47db7224c51ae15afed736fd31c043109bfa65c9554896df9907e5a74282e011f8be6ba91f059de6eac376e4a4f55668dc9115ac24c0b1a780717dfbc2219eb4f618c92c8ee43869fb4eb242e9b", 0xe7, 0x20}, {&(0x7f0000000540)="252c9fbad62446414e8e914be0feddce9604efbf49b4d9d5efe09a47330e89b75ffb26539dc436ce4e82d9f64d49b28a01e61bbd27f135e9c97a8dc292232d17ffbf9e4adef929c90da694e793db332692fe9684d6f1a886041b475161124a02d64f5aed52d51f6b5438ab4b36afd830f03339d257af67ae4ebfede427ea25b573d2337de184c37308b78eb971805ec33b8316a5d3ea7d85f17a54b808a6149c811b3b9e76e3fdf82f7498ac8a70093f509af4831942efc7936fb826835dcf57ccdbcfa1a9eef8b8bd27f7885f5230278e3fee0c577700e780f421c66c7c548a1b08ac204b002ebea30470f4b31670b53e609e7f1e73", 0xf6, 0x40}], 0x400, &(0x7f0000000980)=ANY=[@ANYBLOB="67727071756f74612c696f636861727365743d63703433372c696e746567726974792c6572726f72733d72656d6f756e742d726f2c61707072616973655f747970653d696d617369672c736d61636b6f723d2d2b2c666f776e65723c3fae1d809c7104361fef132327670000000000a1d52e6b46b07da2fe68a9", @ANYRESDEC, @ANYBLOB="2c005722d43c78d8782b200b68e03fbcb7e080fffec8a22e3f27bd52ffcae25e00aa188bf03b78a0039a1ff1834368e04fb757db6a117dc02ba686f8b5c3d5923ade0f7aa4c1e8456f3052336ec41c86b8b9010231d1624dc4a4d111e57d50f1afdd31300c2c4795247f47406834ab29655beadd08451a04e25401ebfe6fa832b212b0e945ac5f0b8c77f80ecafb0c43768a0ea983df087f324ce51c9461014b9b81ae2e1d5010ea206c9fb038d9e03e9443e652cbcb18367433e6697252244bc9f5a1f0d981d9513256909affe692c978da661b", @ANYRES16=r0])
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000780)=0x2)
r3 = dup(r1)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f00000007c0)={0x2000, 0x400, 0x401, 0x9})
dup3(r3, r4, 0x0)

02:51:07 executing program 5:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

[  270.822864] jfs: Unrecognized mount option "appraise_type=imasig" or missing value
02:51:07 executing program 2:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8000, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
modify_ldt$read_default(0x2, &(0x7f0000000080)=""/12, 0xc)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x180, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r4 = dup(r1)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r4, r5, 0x0)
ioctl$FIOCLEX(r5, 0x5451)
r7 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:07 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x54900, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="38000400068b0000000000000000000000000075000000000000000000000000000f000000000000002f6465762f6472692f636172642300"], 0x38)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x208100)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000180)=0x8)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:07 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x108002, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7ff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
pipe2(&(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xc)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xffff, 0x1, 0x3, 0x94}, 'syz0\x00', 0x46})

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200))
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200))
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

[  270.995385] jfs: Unrecognized mount option "appraise_type=imasig" or missing value
02:51:07 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[0x0, 0x3ff]})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r4, 0x0)

02:51:07 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = open(&(0x7f0000000080)='./file0\x00', 0x103002, 0x8)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:07 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x6bf, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000280)="4a2a5c745305a377cce3bd81b06b91e901d42371a64f2c0d914f010a616ff3418f66d3521bbd95ebaffa753340fa2c0ae33c9b59d968aa833babc886e1b5102bde326fcbb5d5289a40be5ae7ba5b3dd89f47e260a1e70d2cb20e69d7616a9cd5b3", 0x61, 0x4}, {&(0x7f0000000300)="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", 0x1000, 0xd76a}], 0x2000, &(0x7f00000013c0)={[{@umask={'umask', 0x3d, 0x2}}, {@type={'type', 0x3d, "220333f0"}}, {@type={'type', 0x3d, "8809a125"}}, {@uid={'uid'}}, {@quiet='quiet'}, {@session={'session', 0x3d, 0x10000}}, {@gid={'gid'}}, {@dir_umask={'dir_umask', 0x3d, 0x80}}, {@type={'type', 0x3d, "aebc8764"}}, {@umask={'umask', 0x3d, 0x7e}}], [{@fowner_lt={'fowner<', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<'}}, {@appraise='appraise'}, {@context={'context', 0x3d, 'user_u'}}]})
dup3(r7, r8, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
dup(r1)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200))
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000080))
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
dup3(r2, r3, 0x0)

02:51:07 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x498, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x3e8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdb, 0x3, "c39c5118b53436406b278bcbf074a7d6cbb90087d4568fc946aff19e577ecbf4f8a62ec17ceb45bb35d02ccd359c9c5a0f7264ade90811d3d7a3ece8e65d6331e1e2f00722c5389424972675a5f89b145fba75a8f229a3decfb62e63767a10fd27b1d4a0d0b57ff4ed4fcea561e8027f1640a20efa35ac5e83e0362e6d3c3a40c3533bd8dcb6a6bb2e06968f6bf48fbd6cab3585beb91edbdf65a2613935c555aceb62021236dfd44696bc2ad42aa7f1f3f3b570a02715f603f9cbc46c3d145de24381b39dcd59be4f047987b150eabe5c6728d96e499a"}, @NL80211_BAND_2GHZ={0xc2, 0x0, "f0855e89623ff53be24fba54472a698038896b5b2169b465c521028eb8a7d64b250489c41f08f0bec22f234c7e44679b9e8aa34907df21fcccb15aba647dda56389bdc9157392def20f8567af8be06cb398bdd5499f8917f337b7630a3f6ceee221022c246f55175f1a3fd7fcfa3711f5892d877e90aa90a01c7b8301261294b6da75c83c39de21a0e9375b74269f8d867e14764ed06fabc1efded1cbb6abc046c2dc91451b80507a1094ff0720373d201379da96b4f710900f74a117787"}, @NL80211_BAND_60GHZ={0xbc, 0x2, "00716b5e64ca4a734177852ef1ccc0892dbda2d58fdc5c5444513ce252cd298201d1b7ac65e72792fb5adb52d29d7c209126f9bb0a8f2712ca6960713f258e31f08c01bc0a448b2f022d7673ff7e6ae342f5505a196b632e52510fdf9039084bef382bc4c242ddab6e2e327a5b2d36d469d8ff23e3df9dc6499402db9ab6977942e8ecb98a643b9e5bacc43ceb43af7f084db10cab81d9c5de6a99de5890564e34818abb4635f247b43de0ebf76fc5c7a3690b1772164746"}, @NL80211_BAND_5GHZ={0x33, 0x1, "5574c802c0de414232dfbbde529ef2447216834b7238aad7da25a9e1c176a35cd9ee93ae82e602d933be48889f59a1"}, @NL80211_BAND_2GHZ={0xa5, 0x0, "0e1874e0f2dd5aead0363219809972713741941ce237ec2ca4d63aba742ea8639502439901a2a4edff3feef4715dce8e575484caac23e9b324e5d2e46a2410cbec59c36b07c929c8188d1361cf5c6a03af61c6be2da959d55501fc923967764abbdae624f1d16366ac38542b56464408873aedb1faeb7d263a86822cfc0160d952dab846d776339b708fb80f7a551c76cd7ca22fa13fd14653c65912fea11b5736"}, @NL80211_BAND_5GHZ={0xa9, 0x1, "6bb5c24acc12bffe89935b65d521ef48ead267c4ec77b8e8e64fdd49c3abef8a8806f08133e4cf9327ce479662c68b0da3ca2329795d54eaff8c8f9bfc975c96348a39cfd5ca4fb03a92310151d2e3afacfa0281b072e7242eb661780ad6b51777c169c4898231ca7392b116f4b0954f7a42620eaa028a437d73fef9c42f446137994c33bd7d1111c3722977fadc6b9a7d55e08753e277578bac5542a08616dfee1f51aee6"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BSSID={0xa, 0xf5, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1}, {0x8}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x1cb}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5a90e91}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xff, 0xce}}]}, 0x498}, 0x1, 0x0, 0x0, 0xc000}, 0x44084)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2)
fcntl$setown(r5, 0x8, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r7, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r7, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
ftruncate(r3, 0xffffffffffffffff)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r1})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x1, [], "00140100"})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x634202, 0x0)
getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r4})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, r6, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000280)={0xfffffffffffffff8, 0x2})
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{}], 0x1, 0x0)
dup3(r1, r2, 0x0)

02:51:07 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
poll(&(0x7f0000000100)=[{r1, 0x6001}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000000))
dup3(r2, r3, 0x0)

02:51:07 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x40)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
dup(r9)
r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:07 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r7, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:07 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x210042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x106}}, 0x20)
listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/126, 0x7e)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000104000008000100706369a79ed17184feb033303a30303a31302e300000000008000b00000000000e0001bfb3e40a823a1b8cbdb00f3bc5c3006e6574657464657673696d3000000800473709000000080001007063690011000200303030303a30303a31302e300000000008000b00ffff00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0005000000080001007063690011000200303030303a30303a313053140000000008000b0024000000"], 0xf8}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0)
dup3(r2, r3, 0x0)

02:51:08 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0)={0xfffffffc, 0x8, 0x6, 0x6, 0x8}, 0x14)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(0xffffffffffffffff, r6, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:08 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x4aa3, 0x12})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x15, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180))

02:51:08 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0xc, 0x7ff, 0xffff})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x280182, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r7})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)

02:51:08 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
sendto(r2, &(0x7f0000000280)="a553a8b095c067988beca70afb728fbfcec6362c5433f6c8cdc86c7cc345f1880a847dba48c1c023bccae8a52390f1e4749e9120ce38badf429719516daeaf85303c5ad5f697747d6b67a5ab5352bbe28f83e7f57f834bd0bec1720b82ff89224cdfd18237d05cc5bf39ddbd45d9a9abecef15ad48406db588ca3d7472e854df8d29996883ad50750cbcd3f06390266288367c23c3b3f5e025655fa7a1bb7326353cee0cdd0d9cf0b280ca928f09952d77ab20df95fe6b8374fd3aa56dcaf5a3fcb2abb2bded7d2d61a49fecffcd0530a8dba27e7aea34685c7287e80bfa6abb9f6eebaa693f28df7c4c917e2250da100ebdf315e9e120", 0xf7, 0x20008880, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0x1f, @loopback, 0x3}}}, 0x80)
dup3(r2, r3, 0x0)

02:51:08 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(0xffffffffffffffff, r6, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(0xffffffffffffffff, r6, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
dup3(r5, r6, 0x0)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x1, 0x0)

02:51:08 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r6, r7, 0x0)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)

02:51:09 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r9, 0x6431)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:09 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r1, 0x80000)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:09 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10703, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:09 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r6, r7, 0x0)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)

02:51:09 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
socket$tipc(0x1e, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'bond0\x00', 0x4a})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r6, r7, 0x0)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
dup3(r7, r8, 0x0)
poll(&(0x7f0000000100)=[{r7, 0x6005}], 0x1, 0x0)

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
dup3(r6, r7, 0x0)
poll(&(0x7f0000000100)=[{r6, 0x6005}], 0x1, 0x0)

02:51:09 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x22d01)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r6 = dup(r2)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r9 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffffc, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9})

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
dup(r1)
syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x1010c0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
poll(&(0x7f0000000100)=[{r4, 0x6005}], 0x1, 0x0)

02:51:09 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
dup(r1)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
dup3(r4, r5, 0x0)
poll(&(0x7f0000000100)=[{r4, 0x6005}], 0x1, 0x0)

02:51:10 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400000, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0))

02:51:10 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
dup3(r3, r4, 0x0)
poll(&(0x7f0000000100)=[{r3, 0x6005}], 0x1, 0x0)

02:51:10 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:10 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002940)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000002a40)=0xe8)
sendmsg$nl_route(r2, &(0x7f0000002b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)=@getstats={0x1c, 0x5e, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x7}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x200080d0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 0:
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0xb, @sliced={0x8, [0x3, 0x1, 0x8000, 0x1, 0x100, 0x9, 0x200, 0xc2c, 0x1, 0x7, 0x0, 0x0, 0x9, 0x3, 0xd92, 0x6, 0x5, 0xba, 0x8, 0x0, 0x81, 0x9, 0xff, 0x8e5, 0x1f, 0x4, 0x5, 0x3, 0x5, 0xd8e6, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3f, 0x2, 0x8001, 0x1, 0x8001, 0x4, 0x4, 0x1, 0xe9, 0x9, 0x3, 0x7f, 0x1fe], 0x4}})
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f00000000c0)={r4, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:10 executing program 0:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000280)={0x0, 0x1})
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000080)={0x0, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x862f}], 0x1, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000002c0)=""/109)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000340)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000001c0), 0x4)

02:51:10 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:10 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x9, 0xfffeffff, 0x7f, 0x78b8, 0x2, 0x7ff})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)={0x1, 0x1})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0)
r4 = creat(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x201, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
dup(r5)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r8})

02:51:10 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:10 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2, 0x6})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:10 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:10 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x101}, 0xb)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000080)='&{(\x00', 0x4)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x240080, 0x0)
sendmsg$kcm(r4, &(0x7f0000003800)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000003540)=[{&(0x7f0000000280)="c98283583fb79fead6e2bdd2db676f4cfa3c38426ef6245c18d155462f28fc1d60c2390140be759a0fc9a2d2f1d9791c402ccb4cfb2acca6e3f64031f0bb716854830d8a7ecad7094f46ff0c1207bbc4e5b01c16bf5b8807bd5badefb1e42e00b3999b813bfe2669df71c92da2692517124776d9417a65c136c18562b37cd874702edd2e2868b654d588de785c584313b6a998199aa1fba234b4d5ed7e37a73fc83194c7ba51d263e59d5452b2f28a2916a5292a005dc04a610609db3b5d6b565dcf089670c16358fe2e993feda6036751db5c3f6c898cbc5490de0323a30b73db01bb03a34c42fa3c83cfc89780cba63dcbc499d115a85cb62e363605192696c3fb3213861bb1bbeafdc6f5851fd56dea7470f58000fa72531b6b48631802ee66d9f988cb6d5b9258334b3fce2cffdc0846ce5888090b4e119a787abf7cf7046f8e194af2629453c1fc8598cffeeaa4693e31dc7671fa142c8e6d3487ade81f11d81b2322f69eb80e3b2c7ae08623882e36bbb51adc368dcdc6a628b47e10bedf0228674eda21c4342bcac79dfb0ffd41d952087dac97e804038c2affbb5d0dd94c08ea46e9dd67f46725ebdd308343425afccf72b73c22201477ea8074498cc8d6d040900203049b362f07fa938da029beda52701537e8fd078d212bfdd589009b6a680336272352eef04d99cbf5fb44785d864014f9df405585647489b960957cf57650ecfacaa7cc4d80f45e86e89a9a8c784a53e8e4719cfc6b120d0128fc0ae4bddca8068499c159ef88898a0c1116291dcd1a3376f2a612d43985e26fc4b03e22ea4352ef1ea2de77ca79485812bfa23b978a17fbe052f81073b3bcb427ec967094155cd0f6e960499bf6fae35c4a1b891a4752b68a63815ca2dca3834b6837fc73907746566f9898022d9b50ebaa4f24921a8004bb755cbb820f6464814f64d0d255b6e72f040f9f31ba7f42bef662c845cef19ac2a157d7cf0b3137dcdedb38cd98211b94e9411954a68b5cd33eb012bbf6c339c52098e384d208fece06ed03bb276a0c71db80e97a6f118c3298b50509fed95cd827db6e84410abe2dd94017d71278de7c95a73857feb2d005bea6f6d311375cd0b0a789dd5fb4e3b8a231fd39aeabe7130adbea11157453045849514768645a1477c57d9293fc660dcc19cc6a10146ffac16faa55042c1f3a894a103792a0081e54d9e390f1100b5445d22957484601f9a7477e304920a72897e217718f88afec6232c4619ee560bc56d3e7f775d9abead5a35088a1b9acca1ac0c0057ede88e0cfea5715f9320bdf04f54286266e4101410e2cb96db4cda2b22cda42cd6ae2769d38974d1ada911bd91985bee487ffd5ee1c375df394606d9893f6140425eee13a12f59864646a5ffca6feecddbaf76490e836de94d049d7210e6aaf53106e10fe057fa4d77cead93a83fbefe766cdc3fd12b89f08844d1829a8b2cf133498f3f37f28aca08b7aa7d6ff37f8d715d29300b8a11c6b00dda193f5a1127096a8efa02b07e7e79f74ef6fc14d886e8bb64905c55e48888f41df6a525ae163ef55c48026e3330e64c19c30009bfc325d47d46bd4ce4116daaaa6e1bd1d7c3f2db79ef612598b32711db10d55bebf781421714551ba4decaaf677e673a0012aeccc51fdaadcd66b117e5c093cab04576efd2bbf46b5d15d5244ca81408ccc9d224e94fa5281df7621dbb93923c0f09e9d60ccd7e6d48d47fd36db366334cc109b1163574bbe140177e0c8a59407868b4a7b5e7ad3142233b45015ae2038196ce2756cc14b6b4642f852993cf1e1c0653a3f73209d3739241a3be13b02c9c9e081286e1ad5e2c4d03f612bf462764af02fc882340cd4ce38fd5eb957e9bb2dbb11dbf32ce33c742469cfe48e96b1c97c7d07847089a576f873d20da474cb4c62ca64de2474499f5347bc1a1f822a6c5a426bea6cb87de2e5df6a804226d4ac348f2ef87bf4b22ef6f9924cd7def7cc282740c27ae0246f00857676fb5f9d2724d3289936c2e44e4a52b7c391b2ddb0159ae68ec0a7ffe1038b4b08a619743ea4608c5105a3d6a6e169a7899dab97d5139f1bf5db7882ca001e4a739c50944f794e89c3ff9b487273a8ba8cae1d5aa9a6bb85e707a8d460cead42fa89659a8665142b4b48d2e80e553e94540af0a75f87aee3b67aed05d8fa0f9b04c51734ae2a48b1dcabb7ea5114b53514fbc1c1ad51e057178a5232d65931adf9bfea767b6fdf1103942aa53833a35c5a5f55d698e8b3756bdc62c2d0456e41f0f2f94504daeb8d068aef2d7df3e34c0d909f63b2b32f8d61f1dd135224a05fe6c2d1513da1f2355f6a94651e6d608641807a1eabc206222eb01d101d2ed49b254179f06862d117e1ed81c80c0e7475e53749e70bb3db1c2e5e950b6ddd8b312215eb94419f6a5e66b4a4db0e46c5277c084116a69beb35f826d4e4ec818b0f8847bb27d702ca3d12083404b43c1ed057c95b100c639ac0cf14b9e9341c691fa0004e1e8596720d8392e47e3f714c0a4b363469f2f56240ea91fea346619909159497bd4581d642dd08fccd7bfad6c9d4288607d34c8b1588c38045324f4a906b782f8dd1486244ae634967344d39f9538ec67102c5eb3d8bd7a84dd8ed83b80b7b986e437a5d2037b747a904c997077ee2d4baab3f1a5eaea3c12951972ec4880f5a694433db9ea836d3a2e49285cc5348391b416c6a746a6b3e639d1bcb19dd2a3ba8dabc9efa4e12ed913587feb82abcf2426de56a55876a93f8c07fe182195902964ad617b940a2a8345fb49aa650a54057ee830b55cb1f3186c1eeb0456aa2dcee4a36cae3b1ecd802dbe613d8e6663e8750fe438db7f32da4043ab294ccb6668234df8c34f692f9083387d42cb052ddff341f7c00ce2a92c582cabd54b164ab730d5282b4458d67a584af0823a6c12c6cd1e49dcb1e568bc7ce99444a6625bcd68021d64e14230bf2b8da09d73e89d3d9348dce4a4b5737aa35e28f3383b9284dd717f136865dc0b7a21781d8c3fc22f7f5f15e149b25bc20a414649ccd951683e4f4f0f70a658e133d07cc43bf49d007ba248bf329fa69a9fb153f7e8b3ebfb48b217e6e0894117696407826783301d4908d3209d6b1d4bdd6a3c8eeab2302f71d587370df779810eca4ccee13b9bdb549796479ab1eb6fa58ff13806922f67df9e0b96abf5f8450f32175f2c5e4c088b15159f894cefcf630b08239195f56a6ea2116247a39bb39b279af98cc159e72360ffcba938b9d66e6bfb8f7429ce71e9f9f7ee3b57206a10b47f1395df37b520ef9877ada197254260fbf906b62e9036f9c21b0d4525b3f03ec6a9c13c135c9391be1a563ce0c400f22faa9d78da8586fa79b51dd30d6761b81eddb6ab8221b423a57dcc7840006183c20976c5ab96779cb343c1d97f2371b7ade39c4539de9cf700a78ba8aabc063889738bcefd7a24f1d68395773619ef7340f930d52b0c27a775e0945b1e1e96419f883a111a2444feead69c11e5bd9876eab47d080ddad3637b62114a1a0eaa71a6955fe6d2201e825170cb07fc09a8ddecc67c9a23e38ea635523d6fdc3226bbf3b531d018c9b444f4ca80b8160327d2e69acf60ca2c38c55769d8e0e327cb994fcc9f2cfabe8494ec93c5d3bc0fc1b8065099c82f4d5a2aaf44903e7f8c88fbc8d5bdb39e2c588d8dd3966b21b4e3a3ae7a5f6aae93902b229d9a302f66079b68136537a446aa9c650d8375cd740c7e44fabfcb58cdc78eca7697c6ff55840d9d69e40152b306ec4ee9d6a2f2a84b6215fc75899c78b4b17975393a85ec0d160c5455f80291d0ba5be1f9cc57c639b6c5fd6c18fc80b301d68b4918e1d97808768934c369f87d96baee56706698301e6f1bc7fc4099736ad02498e7d3fffeeeb0a79dce703c2a2262ec187a2b5def1735e299fcf74dd25731941071929bbb0cd5d57a58956ca5968d15eb7e7745962e3e6b4861ed51c2877592259df3f36d6461d15d0f804c01c00c65614271e1e2086820f82af84f562adc7745b133619fc2e01cf2b9300edb65b14b3a98837ece905af52409cc29417e1d1710763a84cffbc7301054d51d35a18d6a3125e3ca9da284f4d4bf1ed7a7aa581e364d5c3bd0080db9147e3d42b7cf7d05cdb8210019f32123392bb683a2af63ec8b6dd83509475b1cb29429c36276dc76ca6efe862ad3bfcd906954a6339ed4b21eda9068c85951637646ae837b2cb6e45e4670439196d62d34b6f51e1c13048766a670c82bf217d5e17392b82636bea20e081b55a7acd25cecd79d1d232ac9fe84b3263186789ac1a187671c4fb8ead70b469b820f0c0606aa9554bd041b872171099d1d8735b6788c52862240ad6e11a41b5b9c6a5828dee95aea63af7d321daf8b511c63989db807ca5b06d1a79ba77f41badc4f7c896ca716acbeb500b7febb16caaa3ac2558cc53cd3806e36389dcf26795257b68696a0ea811dd28d0b565b244daf63ed6f2411df7da37c843e2de1f25d2de3d658978143bb976d67140d343d44aa0be2c8eee6d7481f013072fa47ad22cbe8a7c1ba875127b9ee950466a6e9d5062192e714f544afff32a89c6837ec5eacd70d44013ecf04760245a34eab4dabf4512ef0ca2e9769fbfa5afcdb2a594ecc3a31fe9d6f7dec47799fbbe7dc93f4286ba3f12844ff697dc78f1cb3baec895fe85c75f6eaae082a2e263433efed10038a75953aca048dd243cf09ed91d791dd2bf6418e64ccec098d20d1f6f9880b4a7b2affb69d5997048612594a87dad94033a97b27a50f182d6e133bac1911dd75e9154203c54c8342454226a37d225c60d8792d9deea29ea617d3d86e3bc329e6b6c997e396212682dddee27ca8cd063fb7cc0e674f0a1ec3ce490b83df1563ece0d3e35b50b15286fd2eb25ea5b7bc034a56d7fcf8b2f0898d2e4783608231f2b7afe7e21f5c6e6d5b6bff459c9ab462a8a687cbd4142c57999ab6d2a584182ea4d4c6688f6c01cc358f4b7106dc5dc5e7725239e5d51b1c9b5e377849029e4813954eb12189315ebe46068646db2a1efc2b7181819995ad0cac412b9e5b5541b949bfec3d89218356e50a828a5030b19a60a2c9e1bf2299e55846608412afcddf43cc32f1f77502403bc2e00f14ddb2e74d77dc8e3a66ba3f5000edfdbe1c6fb8ce6b2cbf1c2b57e658ea36f2b493dc81ef1bfc9929f9976ddc6397ad0a4fe3968ee1a9e074d4ef5375e58c79875f843edf98714e7084d6000ffc91f7f9e969c8458416319a00f06b69f07ac599f1a3697a309a61fd701797a52d6d657051e6d59fe3ad39cc436ecfb5bc16b9e9d499b94e4688cca06a40ea66c25a69da3a185017da999b51b798ebd7b8a8c502b20c050d7c57bc3b037f33598c7fbe4b8669a8b06149012df41c4d1e488f257bce76efe55fc61259332fe3c2bcbd701bd14bb1e34066c63198d845a9047917fcf82c5f0d4afebb41ff33c90a33b5d0264481d09b2ac1515bbb1cf4e23370c9d2eed9ffcdd13ba0ee3efea1fc13af83f34d4966d865ccdbf7a83e494c13cbda871e04cc2eb545cac746497e1a8cda1402b82e521729e60116fc4d5667ba057f3ee76bd9e80d4676cc7e5200357cef0484c1cabf2e9635dad5751ae8695a847cd13a1d03437d391549c77f03a716199c930feab8bb7df5e6e54fc559ce489a9fc1e12a50033dc25fc8725b32a823f7d9d3c09b534121dca9f333482fdcd36b177019e1d46e7f19a3ba1585e1e75b97ce28ef92dff858cd191ec1f0ade5a832376a5ed0c080ad5a0", 0x1000}, {&(0x7f0000001280)="13a9491b901576e7626d7c77f2280b69e8be3084948248e79f239af248ae29922730c7bba0d301b9d012575da5abd1e34b3147b3a923dfc3c0432c500a67c68567b2c5a7c73581af26f4e8f02c4e23cfd44a8826a7aae124974d869f7666194b4ea9a77b2272fd8c74e8c0af2ceec4a9d2e88ad072a44b45", 0x78}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000000c0)="09b3bc3f075962eb28a43e31088daa5e01a8f1fcc5c1", 0x16}, {&(0x7f0000002300)="eae4dea62b8e97804fd1ca31e715ae82a7f2026090c0420eb1683a6efc36a5546190b2bdc35ea2d2e1db7158518faa08bca31d73d1943cc50c3891de0077c76fc022edc86d3656813bd3f085cafd1ae38e3e756ce66fc037", 0x58}, {&(0x7f0000002380)="58fcee413c52f4cf842aa11f936a293e6d8ed7a7cd17c18c9cfc84622ea75646484143a585b25795351a855aca1ed0aeca78ac3950b48cec73a9eb398e5a2f55fe6e6311ee9be6c3247e5a13c66be1266e4cb1062bd8649de6e5f060749ec00070", 0x61}, {&(0x7f0000002400)="5508cddcc274b619c62f7a5e3caebc4b89bff8cbe28f80be1919ba65eadff2cef7203d5963430ced4c719e198ae206787f1b1a4da3b152cc6251dc5001246856fba5905232b4996baa435dabe687d2cc92f5d2d01491bea8311b0c453e6114fed8505c20e8571a0b6de420940cf30461f2661a81477eeb88417a8f26f8d48ba72d9b9eade3aa7a8e2f9678cd6d45ac4791636629e99a5b291fee2635fcd0b7bd820192eab79b9965e2bf16d355ba84", 0xaf}, {&(0x7f00000024c0)="72ba6ad8924e53d3922d619e90262157902bc448ee732adcfca1e7ae5f870a3031001ed11e1bacf8d324", 0x2a}, {&(0x7f0000002500)="6f46ba8b87282529e118176ed7249a63d218fa130f728bb6829d58701e76bc06657296b9f1da", 0x26}, {&(0x7f0000002540)="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", 0x1000}], 0xa, &(0x7f0000003600)=[{0xd8, 0xff, 0x9, "2d596036bf14fe49d4e732edd8b7b7d32101e4f44ed9aa5cec8444a0ec699703e460df2fc86dbf3697174f5ac4081531d0f5d7084a1591e46fb227a0ca19cb0af5fbfdac07c5580a10d5b4eea5d72e6c95bfa35dc0016e8039e85dbb36061da7e93389e62402437c376553228cd508c3445a6994b1af9dcc95489aebd5e5250f8ebdeb80b7ccf136f7b80fcf94cf4f2351061acf321f49cf69a6ad8426d5db17d483643816cc8be575bba0ba9dd7e4f66e55f46b9f19c079a088cbd2f1305ebf4b"}, {0x68, 0x103, 0x80000, "9795033d3936568ce744023f36da0ad7c692bf2478382dde0fe4fc3cfbe6620c418cc04fef53bb560b382e89d6d8b38a06b6dbbf76d5f85750b6edcd020f334691889dd49bd983565eb82a19a8c521f1c113a063b3a0"}, {0x68, 0x100, 0x10000, "ddb844ade223e807cb78a1d0bd0cff07d5a15276edf4f15987a0181c565d2bed148c85ab6e8c83abcc9146be5065e9c6ca2f29ebb6ca4dd3c859877de68d756f3f660fe393124ac7be5d30bbab4be38b7f59cee4d3d72cf2"}, {0x50, 0x0, 0x9, "02e08b7b8a3a0cfb812d6338924cede95f099adf31b263b9d7755e215334840c6266dfba4fa823bbefad2bc4170de349ecd3846727b0bd91512ec5"}], 0x1f8}, 0x800)
socket$kcm(0x29, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:10 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x2, "bf54f90a2f219dbf"})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f00000001c0)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250300ffff7fff000000000001140003f6fb0200000000000000000000000000001400060073797a5f76756e0000005c5c0890e66baee88c343575000000000000d6fde4f395dc712ddd79589c2f046b0ef53b15c84d6f4d8124d3fa1bbafff9f31412728d5738a88000"], 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x40840)

02:51:10 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:11 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}, @CTA_ID={0x8}]}, 0x2c}}, 0x20000000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x72a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:11 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:11 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000500)='GPL\x00', 0x0, 0x6b, &(0x7f0000000540)=""/107, 0x41100, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x8, 0x300, 0x2}, 0x10, 0x0, r2}, 0x78)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000006c0)={r7, r10})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080))
dup3(r2, r3, 0x0)

02:51:11 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:11 executing program 4:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x62700, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000400020000100000000000000faff0000000000000aec000000000000bd0000000000000081db021a000000000000000000000000000000000000000000000000000000000000000000296903dc2e445d4ef02441adeb47000000df28fe1e49488ae6c52922be34c1ea193edb3e51fc437d8f186b6afe671a936ccb6648b9a6ca2cb4bcef01d65f69840845006bd262f0619c8962c0ffcd52590ca0014e632e62ff127a748363"])
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x0)
dup3(r2, r3, 0x0)

02:51:11 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000280)={0x7, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000180)=0x78)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0xa4, 0x4)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0))

02:51:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x50040)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
sendto$phonet(r2, &(0x7f0000000080)="0656e2d1d20539013698761528666953207077023a02d62cf558243aa007fc5649189da6dc0770", 0x27, 0xc090, &(0x7f00000000c0)={0x23, 0x6f, 0x7, 0x1}, 0x10)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:11 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:11 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x400080, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x1, 0xa9})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
r10 = dup3(r7, r8, 0x0)
r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r12=>0xffffffffffffffff})
dup(r12)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r8})
ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000000)=0x1)

02:51:11 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x501001, 0x0)
ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000280)={{0x0, 0x0, 0x80}})

02:51:11 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:11 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x40, 0x802)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x785641, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000000c0)=0x6)

02:51:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
dup3(r8, r3, 0x0)

02:51:11 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8005}, 0x4c0d5)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:12 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x3ff)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:12 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000080)=[{r1, 0x2048}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:12 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2203, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:12 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80000)
r3 = dup(r1)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
write$vga_arbiter(r8, &(0x7f0000000180)=@target={'target ', {'PCI:', '1a', ':', '9', ':', '14', '.', 'c'}}, 0x15)

02:51:12 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$CHAR_RAW_FRASET(r2, 0x1264, &(0x7f0000000180)=0xbc)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000e6000000bbb459a8b9a2f010b6986e79e0b113f3abd1bda5619a63c05837c421ca5095b4da3f744401560d315fcd86376c8908181646812db7c94f9faef7a35db13d8ae30f2050d3d1f6239c0c47d3b45a8c4026ed34c37aa1107a020ca0e7ef8946a4e3131d81605ff3ab7556f3b8fbbc11530eef64e77dcf983c7ec3898b91355bc7ae3a5aa99e9e18c6c073c4a1242b2df4ea79f693cb92ae73397bd13f8f6f8e4e97f48002db7b1935f6225a83fa3233f35418283197e7ff99dc9deed9bfec0ea82196df10594a6aee5b0a0018eb4d2a4d5d535953b7c26fccff2bb12337fbc01df426424c60b1f050e29a48fb79511b9660202227f55aa18428e2d53e8453984ba54723893fecfddb586fce0e170061cd112d3c808a4b5b8463115593b7cff615b7ada64fbff967be88cf33a2fa520817e89525a63008ef40f275a3f951cc7079415dcf99d2274782570148a4c5645098a3d2f497eb971f9166f458ae1ae5569083349ee86ae46c1a85a4087a422a0f248a1a4533b7e45dd18353ae488fef0edad095836226fa1e76dbcb2af6a74e140b4c6a9d37b8000b6d194cee26168b7ddb0b0a7a84315c1b1213308b1a252197d93cdc2fd3130608294651676b0933dce886959e3f7b6fa340cc"], &(0x7f00000000c0)=0x10a)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:12 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000000c0)={0x2b})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000080)={0x6, 'team_slave_0\x00', {0x40c8}, 0x3})
write$snapshot(r1, &(0x7f0000000180), 0x0)
dup3(r2, r3, 0x0)

02:51:12 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
r11 = dup3(r7, r8, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000000c0)={0x2, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0x4d, 0x6, 0xfff})
ppoll(&(0x7f00000001c0)=[{r11, 0x6094}, {r10, 0x7}, {r1, 0xc051}], 0x3, &(0x7f0000000280), &(0x7f00000002c0)={[0x8]}, 0x8)
dup3(r2, r3, 0x0)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:12 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:12 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101080, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x4}, 0x9a92}, {0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, [], 0x1}, 0xffffffff}, 0x7fff, [0x8, 0x1ff, 0xff, 0x7, 0xfffffc02, 0x0, 0x103]}, 0x5c)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:12 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800000000000, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = dup3(r3, r2, 0x80000)
ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000180))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:12 executing program 2:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x1, 0x22, 0x1, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
socket$rxrpc(0x21, 0x2, 0x2)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x80000)
dup(r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:12 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x80000001, 0x2, 0xffffffff})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={<r10=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:12 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:13 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000080)={0x0, 0x7f})

02:51:13 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r7, 0x9}, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)

02:51:13 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:13 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000080)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0x21, {{0x2, 0x4e23, @broadcast}}}, 0x88)
dup3(r7, r8, 0x0)
dup3(r7, r3, 0x0)

02:51:13 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:13 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:13 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x6, 0x4, 0x1, 0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe)
delete_module(&(0x7f0000000180)='!\x9e\x00', 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:13 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:13 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
dup3(r5, r3, 0x80000)

02:51:13 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0x8000, 0x4)
r5 = dup3(r2, r3, 0x0)
ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000280)=""/195)

02:51:13 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:13 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
dup3(r1, r2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:14 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:14 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x6, [0xff, 0x101, 0xd923, 0x8, 0x8e, 0x6]}, &(0x7f00000000c0)=0x10)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = semget$private(0x0, 0xe57897fcc7969783, 0x420)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000280)=""/176)
dup3(r2, r3, 0x0)

02:51:14 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
accept(r2, 0x0, &(0x7f0000000080))
eventfd2(0x5, 0x0)
dup3(r3, r2, 0x80000)

02:51:14 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff0200200004010244fd320d4b5e45b5555fab445180696c10efbe4fbcea698b3e0fdc4135fae852ee9d2aecd12aa5c43469cc0fbdbd64238cc78a389000613965864d066e598cc80c7ac6bb16db80a0d8997c6ae74e040a249ced244ecb0b273a3c0a33781a2c1afb77ab5296608283b7eb9b8ccb3b176ba45c6f7146a5a116d80a9b4c37fa2d52a57328c8d174a87e1818ea6cb355"], 0x148}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x20048081)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x181000, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x10, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)

02:51:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:14 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200))
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:14 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfff, 0x600900)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:14 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r10=>0xffffffffffffffff})
dup(r10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100), 0x0, 0x1)
dup3(r2, r3, 0x0)

02:51:14 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x5, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:14 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 3:
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x80000000, 0x0, 0x3, 0x7, 0x81, 0x2}, &(0x7f00000000c0)=0x20)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)=0x6)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:15 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200000, 0x0)
dup3(r7, r8, 0x0)
bind$rose(r7, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

02:51:15 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/2004], 0x7d4)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x100, 0x0)
readahead(r5, 0x7, 0x1)
dup3(r2, r3, 0x0)

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = socket(0x1f, 0x3, 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000280)={{r1}, "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"})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
kcmp(r6, 0xffffffffffffffff, 0x4, r0, r1)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
dup3(r3, r4, 0x0)

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x6be301, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x400200, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xf7fffffffffffffb, 0x30, 0x0, <r10=>0xffffffffffffffff})
dup(r10)
ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000080))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:15 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
dup3(r5, r3, 0x80000)

02:51:15 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xc200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000100)=0x101)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x98, 0x210001)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[{0x3f, 0xfffe, 0x81, 0x3, 0xe9, 0x8, 0x44, 0x7, 0x1c, 0x1, 0x9, 0x9, 0x6}, {0x7, 0x4, 0x81, 0x33, 0x5, 0x80, 0x6, 0x9, 0x8, 0x7f, 0x81, 0x8, 0x8}, {0x1, 0xda6, 0x7, 0x0, 0x57, 0x9, 0x1, 0xd9, 0x1, 0x81, 0x0, 0x4, 0x9}], 0x7ff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000))

02:51:15 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ff, 0x402000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000000, 0x5, 0x18f, 0x2], 0x4})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x98801, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x102)
mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x40010, r10, 0xcf000)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000086}, 0x20000040)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r7, 0x3, 0xfffffffb, 0x7}, 0x10)
dup3(r2, r3, 0x0)

02:51:16 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f00000000c0)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000)
dup3(0xffffffffffffffff, r2, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, [], [{0xfff, 0x0, 0x1, 0x40, 0x3, 0x6}, {0x0, 0x0, 0xffffffffffffffc0, 0x3, 0xb3, 0x1}], [[]]})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x1f, 0x80, 0x7335, 0xa, @dev={0xfe, 0x80, [], 0x3e}, @dev={0xfe, 0x80, [], 0x3e}, 0x8, 0x80, 0xffff0000, 0x3}})

02:51:16 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x109b00, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r9 = msgget(0x3, 0x214)
msgctl$IPC_STAT(r9, 0x2, &(0x7f0000000100)=""/120)
msgctl$MSG_INFO(r9, 0xc, &(0x7f00000000c0)=""/114)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x400020d, 0x401})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x48480, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x6c16f7ba5c3b61f9, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r11=>0xffffffffffffffff})
r12 = dup(r11)
dup3(r12, r8, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x15, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f00000000c0)={0x7})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x3f}, 0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100), 0x0, 0x175f)
dup3(r3, r4, 0x0)

02:51:16 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000082}, 0x804)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, 0x0)
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x67172026}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0xfffffff7, 0x3, {}, {}, 0x48, 0x8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x43)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @usage, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0xffffffff, @struct={0x1, 0x7}, 0x0, 0xfffffffffffffffb, 0x2, 0xffffffffffffffff, 0x1f, 0x8, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8, 0x2]}, {0x7, @struct={0x1, 0x3}, r8, 0xfffffffffffffffe, 0x1000, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0x40df, 0x1ff, [0xaf, 0x21f, 0x0, 0x28862979, 0xf564, 0xffff]}, {0xbb3a, 0x8001, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000280)={r8, 0xf56, 0xffffffffffffff94, 0x1})
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r10 = fcntl$dupfd(r9, 0x406, r1)
vmsplice(r6, &(0x7f0000000100)=[{&(0x7f0000000d00)="a14653ea922fe982f11fb9ff5a57dfc7d75ea4f0394a549a89d2af7a4cfce33eca229b276e12cb58c68d8338589e48fded25bf26442b3da1c0fd74a5b070a3e90c93699de6c2a102d2bb615fcd42e13069556d0c3e3100522f87fec65483b5703f87c0bdc011f2c6d0320113c495ee54a907d2efacd75783baf028e0e46dc4eb9d505b5f5f001dc7a362a0deef325eabd89e4d160ad1ae26c81d09447f504406a66976ba484db26e8fcc3fcbcf701bd30b99d761067d688380cef658b89857c52d4adfd76c2ee0af84f824482300ba97283cc3222bf0aa40e345eb4bf4f270338e932f", 0xe3}, {&(0x7f0000001080)="2959106787f875f28b884f6e2e1b60b40a34fece35c08ed67ca5b3a86ccd520d0048f339e52661048ae2ddf8f4ef85a3fd472fbf92b4a66320ca08009bc9f7b4e3e9f4ea758d6b930826bcacfc3d1ece66f5d1c9de14b09b7610791e31b0d3296f5cadba85fef5759d1ec5675001ba4ce3b5b074e47a5afdb024e707f3565f79d81ed837a46f878acc17c98e0988888e3c358b4d18456f524be19c9bc11a5c26fdf377d20e7eeeb89dc99edd7e5143c36ebcbcf908427edcb7f3b7dff6b33cbd0f608f915e7968f09a4e95c1ab6ec1b3d4c3738e0dfc787923e4ecfd437dd393017ad0b5cde2d5d5fdd4583cc38b11", 0xef}, {&(0x7f0000000f00)="4a92f9c7ab976f4ad967feaa223e7d0a00dda7e93a0342d5cb73724dd14856e3874f7dbd47106afae2060b817aa8a1381084643b45c97ce119787f5a0236b07e8d85aee88dd6104416a70acb3e94eae6b02b612b2b96f4b1895a17255d0c879282f7bd216bfea708f361896b9327fb6017a10e105c8ae219f45c1cb752c0ae914db05c89ee4e593f651852e231a3ced4d56a743fd239c588828cf72da0b31362f087b2f16c6bc9973a65b6779b54e703c30f8670e4b74f38075bc205459ac7bef1ec77beee91a2a95d087a6513e4c540", 0xd0}, {&(0x7f0000001000)="d6845f0c214924ec34e53d0f3ee78d57b2fd1d60d9d6567f6b7fb479a4f674a2d19166cdcdebbfecef542a16bc6af995b2509ac19a25b49b228b2e3cb732ea71e8f90a4248e9267d087cd1654627092126397f0ae83e422dba", 0x59}], 0x4, 0x2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x1f, 0x1}, 'port0\x00', 0x1, 0x200008, 0xfffff97b, 0x6, 0xffff, 0x1ff, 0x5e, 0x0, 0x0, 0x81})
ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000000c0)=0x2)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xbe81}, 0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000080)={0x80, 0x1})

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:16 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200))
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000080)={0x4, 0x5})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(0xffffffffffffffff, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x100, 0x4)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)

02:51:17 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
futex(&(0x7f0000000080)=0x1, 0x8b, 0x0, &(0x7f0000000100)={r4, r5+60000000}, &(0x7f0000000180), 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r6 = syz_mount_image$ocfs2(&(0x7f0000000880)='ocfs2\x00', &(0x7f00000008c0)='./file0\x00', 0x1f, 0x4, &(0x7f0000000a80)=[{&(0x7f0000000900)="6e8edfd0f6950ecb2b45466192be552cef01a73aba23c46eebd2359252", 0x1d, 0xff}, {&(0x7f0000000940)="3b4d3fd488790b52be9f7b02c96f774cfca51b83", 0x14, 0x2}, {&(0x7f0000000980)="db0ce210024551759afa85aa576dd4ff35a43c07c2199f4c6ca673cd21c42f704160852a74f9d66751cba4631fc07358aff84d0f47b00a9e3cbb42072df424b1d967bb6fce73777c9903230f74dc46de86e371cfb46513bb0522877f96599202ce5421579164d4e0359bca7a041ad33be26d48d405f8cb2fd5f0dcc5e1f6f5f8ef746b37cff791881dc540287cbfe34c0eb27a", 0x93, 0x1}, {&(0x7f0000000a40)="57746378e1ab5c82f751504ac7b0", 0xe, 0x100}], 0x1275801, &(0x7f0000000b00)='@\x00')
r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r8=>0xffffffffffffffff})
r9 = dup(r8)
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r9, r10, 0x0)
io_submit(0x0, 0x8, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffffff, &(0x7f0000000280)="66b4acf153a5306cb7fb02a1107dacab6be485f621e1b858e9390727356ea81d00ef96604f9142aec5ea25362163a14fe84583d298ccf648104fb0b8545df608cd89e7f5e855924eea3558441db2ebddb785df0ec3db2a8a0413a29124348cc003eee5c9b8aa4b80fc983b47bbd6f668304f9812f728978c015544030ac542eca76b506ab655b66651639cea328b944f7defacd743b66a4f93d12c8e406a675ef546694aac91b61619f039e3b51c6a8573d5618e5ee3769e1f11c871001371e35c5939987038f8c42735e5ff1fb9883c65b11ec9c720624af25b446a504acaf6b0", 0xe1, 0xf00, 0x0, 0x0, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, &(0x7f0000000200)="e0e1693150c5f039", 0x8, 0xffffffffffffff00, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)="fd17", 0x2, 0x5, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000440)="a5226c088da05ac4c9eb02548bcc6e1f9ce924b82f72acf2d16d3732ab314e0142ba53159005705d4c3c97279727150cbfd482e53ebb09dc3da7a8d095d773cc2ba377aba132ce45703792d1f7c027ed2934cc0d2c148ed51f66b7c876d82cf910abe8fdca683592dd812370374a0a2048aadd786e67a3101527a4eb556ec93d7ed9204ceb40a3b284592ffa3d0bd3b6ff50c209dc7063e538574681ec5bb85f9a5b3d289f6c85ccabf3f7d86a33533a1fba3e948e0c", 0xb6, 0x8001, 0x0, 0x2, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x100, r1, &(0x7f0000000540)="04b55a1cafc0ee151c848c79a9da4da185031ba203ef25512797f7bf582f5a3bed5cb78784526149fa74658516abad4424901fdfa4abc0d90da5591ce1ca0718b5ee6be167f2315d4f5ab929fe86e1f53d2087ac67df07c19347194e48786d2b4ed6c28552fe0add2efd3adc371e23ed0bab49e9c884bacc48ade340e7f9520ea8e68defc252dc545ea6726dbd9c8c9a75cca193f3e48d6b35b6f38edc13a36e90bf157dc5d39f9929a47aca4af85abaa78ca0cc7da9a2f87f9702d45b690b40625754046f096097b9ee1a554f352763e7fb2d9974a9", 0xd6, 0x8000, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x789, r3, &(0x7f0000000680)="790f09ad9050b62505890cb2b72c8a06c46c1cddceec0e9df65dcb07e04901bfb2ca5b3fed722f11699c2d6056", 0x2d, 0xffff}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000740)="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", 0xfd, 0x101, 0x0, 0x3}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0xff, r6, &(0x7f0000000b40), 0x0, 0xffff, 0x0, 0x2, r9}])
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(0xffffffffffffffff, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r10=>0xffffffffffffffff})
dup(r10)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r11=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r11})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(0xffffffffffffffff, r3, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x7e1882)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
connect$netrom(r2, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
dup3(r2, r3, 0x0)

02:51:17 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:17 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xd44342a8d7e82e56, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2042)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000080)={0x7, 'caif0\x00', {0x886}, 0x3})
dup3(r2, r3, 0x0)

02:51:17 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm], 0x1)

02:51:18 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)

02:51:18 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:18 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2c902, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000280)=""/142)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000080)={<r10=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
ioctl$NBD_SET_SIZE(r8, 0xab02, 0x3)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r4, 0x0)

02:51:18 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x1, 0x10001, 0x0, r0})
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0)
read$alg(r3, &(0x7f0000000380)=""/16, 0x10)
r4 = dup(r2)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r4})
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r4})
r7 = dup(0xffffffffffffffff)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000000c0)={0x1, r3})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)

02:51:18 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:18 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x2, 0x3}, 0x80000000}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000d00)={0x3, 0x1, 0x4})
r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x40802)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x40)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1)
ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @struct={0xfffffffe, 0x80000001}, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0xffffffff, @usage=0x8, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x1f, 0x8, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8, 0x2]}, {0x7, @struct={0x1, 0x3}, r9, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0xff, 0x1ff, [0xaf, 0x21f, 0x0, 0x28862979, 0xf564, 0xffff]}, {0xbb3a, 0x8001}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000280)={r9, 0xda, 0x1, [0x2, 0x5, 0x9, 0x3f, 0xfa], [0x8000, 0x1, 0x8, 0x4, 0x20, 0xffffffffffffffca, 0x7, 0x8, 0x7fffffff, 0x0, 0x20, 0x80000001, 0x9, 0x2, 0x41d2, 0x80000000, 0xacd, 0xd07b, 0x80, 0x6, 0x9, 0x7, 0x7, 0x2, 0x6, 0x43ef, 0x7, 0x4, 0x3240, 0x85, 0x7fff, 0x6, 0x200, 0x5, 0x9, 0x5, 0xdfb, 0xdb98, 0x81, 0x32d, 0x7c6, 0x5, 0x10001, 0x8, 0x40, 0x7, 0x44ab2c83, 0x81, 0x6, 0x5, 0xfffffffffffffffa, 0x21, 0x10cb, 0x4, 0x0, 0x9, 0x0, 0x2, 0x8000, 0xffff, 0x4, 0x6, 0x1, 0x9, 0xfffffffffffffffa, 0x3, 0x8, 0x9, 0x6, 0x284aba87, 0x8, 0x8, 0x100000000, 0x8, 0x40, 0x100000001, 0x709f29f5, 0x1, 0x7, 0x3, 0xb9, 0x3, 0x116ca0c5, 0x8, 0x401, 0x10001, 0x3f, 0x5, 0x0, 0x7, 0x9b42, 0x3, 0x101, 0x3f, 0x100, 0xffffffffffffffff, 0x8, 0x800, 0x1, 0x2, 0x0, 0x5, 0x4, 0x3, 0x7fff, 0x0, 0x4, 0x3, 0x7, 0x9, 0x100000000, 0x100, 0x3, 0x2, 0x3ff, 0x4000000000000000, 0x9, 0x6, 0x2, 0x3, 0x6]})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/28)

02:51:18 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x9ae1, 0x7, &(0x7f0000001580)=[{&(0x7f0000000280)="49477bd3b5db780048b7f8d6e569bde37b123efb403d17218dbdb7ef70533c58beacbea55742bf49392c4f24d55e8d526cdad0b331a54e15dfe3e1eb9e63c91d43ee0f9f7553c685dac7845b6fb129728b6f0d70330d615d6293aeef22e60ecad0e020ac94ffdeffef4410aa8e429d3c43891142451e4776172e8bdd70e2ba06097f04c53f0e65743067520002e6a7319506f52ebe9beca994a620ff640a6b32ccbd132781e6a712adcb826762060c35fb58d0108da6ded151d666071b1f3781906ed498ca2b0d123724dfe3a398c223a4dac8c3836602", 0xd7, 0x9}, {&(0x7f0000000380)="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", 0x1000, 0xb4}, {&(0x7f0000000180)="d12041853404939a13a4b17474ae05d85b72352a6271d304ea5143760b4077ea6a2f5fb6c9ac53ef6d5c426cfee254b32119f1ad0a11cee5", 0x38, 0x2}, {&(0x7f0000001380)="c2c6bb137842c8b5a8abfcaec54ec1a595c48440d2569de020883aea5b08418841cd164bf7f46bb94a1a9d973ff1e38ee41f116ace5f8d6305b598f671e1ca9e2041c669e8ceb7fb9bf604d302eb56ed8c3ab05fa3f0c6fb48f91ea2b72bd1bdac38f21565446a4cf8e56fe71fb89363b408", 0x72, 0x2}, {&(0x7f0000001400)="ea4f9d33f32d13bc6a55e855da3a268642ca569d55f21e4413d3adaa10b07b02c499a495a98bf11f6ceb89b80ca00cee69a1aa23c3d7a513cd7409b4f949deed0f87f842e4af97fb3d9daa8c0a6d9ae6c013572f27513e5fc56e5e926198ffabd3315ed5ecc0e578998aed2d58f4c897beaadda605f553707d2f8b19980165806bf5d116", 0x84, 0x5b7}, {&(0x7f00000014c0)="359f350765b831fa6ba825e93466d4bbee9c539cce8f8538b87a4a0ece68e54ca1532e5097609ace7a5f0c30411b97b779b0513800e8f22c0e523672b6160937809f706b5cefc361c5f20306053642b532ab0dfc10f955c10ca151ac569c6da81d5445785b8f6a8670ec4bb8318ef4dc777bdd8bb38ce820fbbaf0b68222c841abcf849b7b6f8d77cbf2ccdf7f44629af5ea59a75ad2db7a6d018e7bbf480e09d16b", 0xa2, 0x1f}, {&(0x7f00000001c0)="cadab48d0638b154e532dd95dd69e5703a30910f1265537d2dde2348ae", 0x1d, 0x36}], 0x2000, &(0x7f0000001640)={[{@huge_never={'huge=never'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x35, 0x25, 0x34, 0x2d, 0x33, 0x67, 0x30]}}], [{@euid_gt={'euid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '/dev/ion\x00'}}, {@obj_role={'obj_role', 0x3d, '\''}}, {@subj_role={'subj_role', 0x3d, '/dev/ion\x00'}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>'}}, {@euid_lt={'euid<'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]})
poll(&(0x7f0000001700)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0)
r5 = dup3(r2, r3, 0x0)
io_setup(0x1, &(0x7f00000002c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r6, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}])
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001740)={&(0x7f0000000100)='tmpfs\x00', r2}, 0x10)
io_cancel(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x20, r8, &(0x7f0000001780)="a5ab4edecd6447d669f0eeb3bca8bafc8ea6e0a91bdd5d485648ecf6c41b16b21a2cd024fcce984661575aecc682c9b73a067679755219f9466815419725c7f45946c920387ac504f71fb2f8ad734c81fa852adce5fbe86aa5a569a01405403e6a13c80418bcd8c18007d6cceb0cdae99460fd9788959693238e1cef85ce638be13cb7a0ec3d1aee7dd531835670b7ba243fda3802221c9cc67163ab1fdf3064d9c1c12d986f81c8d936c1be4c09b48c78a3e986cde8449753", 0xb9, 0x9, 0x0, 0x2, r5}, &(0x7f0000001880))

02:51:18 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(0x0, 0x0, 0x0)

[  281.915565] dlm: non-version read from control device 16
[  281.934858] dlm: non-version read from control device 16
02:51:18 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:18 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(0x0, 0x0, 0x0)

02:51:18 executing program 4:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x4, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = dup3(r2, r3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000180)={{0x5, 0xde}, {0x5, 0xe0}, 0x36de, 0x5, 0xb2})

02:51:18 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000180))
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200))
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
r8 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x1c200, 0x0)
ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={<r9=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:18 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x6cc080, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x404000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
accept4(r2, &(0x7f00000001c0)=@nl=@unspec, &(0x7f0000000280)=0x80, 0x0)
r5 = syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x7f, 0x4, &(0x7f0000000500)=[{&(0x7f0000000340)="3d1e4b7553856ddc1c2693aafbd46196ed1e4c10", 0x14, 0x7}, {&(0x7f0000000380)="1238448b5954a649363fd67f9e036c250b247c18", 0x14, 0x7fffffff}, {&(0x7f00000003c0)="72de55da69ac3b7657aa85eccab4ea1f330563942b8c4dcda7e8fcc03130b20699de8a3dbad9b0eb2a867d0e242eb0fecdfd2efe7160e8b270d6c94225293a57f4e0393d5649f54785be41c802966d45fe9fd8efcd3993224b761aad409b12b3fb0515992454af3e0c109a0ba3a0c9f3cfe089bcdb0efa2cb7c9f7a23ac9bd4ae48780d7117a2e22f17c588c2e3ba581923d7ca5aff62095d83b333be619d90b03ce4f92bcd540c2056ab2c95099dcb8ec35627132126b1af638d3a99b36b52bbf08936f55484a6d6cfab01e", 0xcc, 0x1}, {&(0x7f00000004c0), 0x0, 0x2}], 0x2, &(0x7f0000000580)={[], [{@pcr={'pcr', 0x3d, 0xf}}, {@subj_role={'subj_role', 0x3d, '/dev/dri/card#\x00'}}, {@context={'context', 0x3d, 'user_u'}}]})
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
sendfile(r8, r5, &(0x7f0000000100)=0x5, 0xd6)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x4, 0xff, 0x9})

[  282.097074] print_req_error: I/O error, dev loop3, sector 0
[  282.235526] print_req_error: I/O error, dev loop3, sector 0
02:51:19 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4, 0x80000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[0x10000, 0x6, 0x80]})

02:51:19 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2, 0x1, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000002c0)={<r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
sync_file_range(r0, 0x597, 0x862, 0x4)
poll(&(0x7f0000000100)=[{r1, 0x6105}], 0x1, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x2, 0x8, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x4000000000000001, 0x806c2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r4})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000300)={0xffff, 0x25})
dup3(r2, r3, 0x0)

02:51:19 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6e, 0x482002)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '-/@'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '#-\x1c:}'}, {0x20, '-\\'}, {}, {0x20, 'NLBL_MGMT\x00'}], 0xa, "f5ee897f4bcb985105f81bfcb8f1c0deb670ab00651e4242d1e4b7ce6a3a0f89f91c1885b3c64592009293536ff510b29406999ed5dce99b0794546268abed536f19a27e22462f35357f685dbb5595850af29f98a95ad3f6775e"}, 0x9c)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(0x0, 0x0, 0x0)

02:51:19 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100), 0x0, 0x0)

02:51:19 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x10, 0x70bd2d, 0x8, {0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040044)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r8, r9, 0x0)
pread64(r8, &(0x7f00000001c0)=""/60, 0x3c, 0x7)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:19 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, r4, 0x0)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
r8 = dup(r7)
accept4$unix(r8, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x400)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x0, 0x0, <r9=>0xffffffffffffffff})
r10 = dup(r9)
r11 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x400000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r10})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc10c5541, &(0x7f00000001c0)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000000)=0x2)

02:51:19 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xac, 0x0, 0x300, 0x4, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7c9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0a8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20014000}, 0x4040)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
ioctl$CHAR_RAW_ZEROOUT(r7, 0x127f, &(0x7f0000000080)={0x4, 0x81})
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100), 0x0, 0x0)

02:51:19 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x2, 0x0, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5)

02:51:19 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
pread64(r8, &(0x7f0000000280)=""/235, 0xeb, 0x7f)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100), 0x0, 0x0)

02:51:19 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x61)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0xe02, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:19 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
getsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:19 executing program 0:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r3})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r6, r7, 0x0)
ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000080))
poll(&(0x7f0000000100)=[{r0, 0x6005}], 0x1, 0x0)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r9, 0x80404518, &(0x7f0000000180)=""/117)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x1, 0x2, 0xffff0001, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0={0xfc, 0x0, [], 0x1}, 0x8, 0x740, 0x800, 0xc0a6}})

02:51:19 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:19 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000780), &(0x7f00000007c0)=0x14)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000280)})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={<r10=>0x0, 0x4}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000680)={r10, 0xd8, "62750c73ad1f8fa60eefe9f8839e9e3b9be1854b6eb3d2cd4545d631f087ef06525c153736f5bdbec39d9d0b3719a33e2c8a97f131b2bea4b4ab9cf31f337b47b72151de914b6936806102c4a77a83f856a45eb12823d82d11f664f15681a8a42971c5893c648b5226b476ac9ed5f3e4e8cc6e72d154e2d14aa694cd6934282d21a7f20ec3a36be20d91972c044916e0192c0d0321ddb0c78a54ebdf15c06ea422cadc8fb617d370d78e00bd48a0df6c5aea7a1ccfbda222501df0cefdab7cbbd7185789a9e2c5903adb734b9d0c4604a22e02879c762e9e"}, &(0x7f00000001c0)=0xe0)

02:51:19 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x83519df}}, 0xffffff68, 0x2, 0x3, 0x800, 0x41, 0x1, 0x5}, &(0x7f0000000080)=0x9c)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:19 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,euid=', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',}easure,euid<', @ANYRESDEC=0x0, @ANYBLOB=',audit,fsname=fd,\x00'])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, 0x0)
setuid(r3)
sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08007a00ac1414bb6bc55585b5cb7b062da896c5daf949454258af7658579c4dba2a647b48cd2d643860428b59f7feaf32f85dba3530db408f67ef62b7149814875d6cf682d0cf88968678a6338686195f7a82dac0f407381513519f2d9ea810be9253016f85c650258005d6a9ccb1e56d20225fef753211140000"], 0x98}}, 0x20040041)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, <r4=>0x0}, &(0x7f0000001380)=0xc)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000001400)={0x0, 0x1, 0x636, [], &(0x7f00000013c0)=0x5})
syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x3, &(0x7f0000000180)=[{&(0x7f0000000100)="4e66333387fa16308a564818413c56de6ce688325e67aed8d23b69", 0x1b, 0x3}, {&(0x7f0000000280)="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", 0x1000, 0xfffffffffffffff7}, {&(0x7f0000001280)="1e21300899d4bf341f375d329bbe62c3b8e0b7585e37587b57aca749f30007af2ab6397928d7fd6906a2336b93f7478ae9504519cfc281bfc0f71df77c2c3ebf1a75447d69c21c1587e74f1adeef6be2ae050f3d568be4b56eb911e0f5cab0a97d364b81ed9c4f1b925549dca13736578a045d7ca7351ce61523313a91f2c23ccdb669c25550f87a578cafe191fe55563916a97ec75304582a55905c0b0aeb38dd94ad20cde705fd3476ad5d12a1cfd93fe242b9b9489d93d1cdbd81b2fde9fe6b8cd313e3aec6406918a20b5ce2e1cff71fff6b8d6f0802375bc74456ba04482c3023c36dfdd7642a3afe7027f0be78db", 0xf1, 0x80000000}], 0x81010, &(0x7f00000014c0)=ANY=[@ANYBLOB='errors=continue,case_sensitive=yes,utf8,case_sensitive=no,case_sensitive=yes,dmask=01777777777777777777776,case_sensitive=no,smackfstransmute=/dev/ion\x00,uid<', @ANYRESDEC=r3, @ANYBLOB=',subj_role=-#@,fowner>', @ANYRESDEC=r4, @ANYBLOB="2c6d61f3d35442668a83954541442c003962d633"])
r6 = dup(r1)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6})
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r6})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)

02:51:19 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x6005}], 0x1, 0x0)

02:51:19 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='3^!\x00', 0xfffffffffffffffe)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-control\x00', 0x260080, 0x0)
accept4$llc(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000480)=0x10, 0x80800)
r2 = add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r2}, &(0x7f0000000340)=""/243, 0xf3, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000004c0)={r1, 0x0, r2}, &(0x7f0000000280)=""/101, 0x65, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="abf628ffa45a7812009c0a2ce4499da571fd849dc885717c15be8ebf8b188e0c54f83e9abc94a541d53111218b10335e6ad4", 0x32})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xc, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000500)={0x5, 0x3, "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"})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
geteuid()
poll(&(0x7f0000000100)=[{r3, 0x6005}], 0x1, 0x0)
write$P9_RUNLINKAT(r4, &(0x7f0000000640)={0x7, 0x4d, 0x1}, 0x7)
dup3(r4, r5, 0x0)

02:51:19 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0)

02:51:20 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x14200, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:20 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0)

02:51:20 executing program 5:
setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000080)=0x81, 0x4)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
sendmsg$AUDIT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4008000)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:20 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x0, 0x7, 0x1, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r3})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000080)={0x3, 0x7, 0x7ff, 0x3ff})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x200000)
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1006)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r5, 0x6005}], 0x1, 0x0)
dup3(r6, r7, 0x0)

02:51:20 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', <r5=>0x0, 0x7800, 0x8000, 0x3, 0x401, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x68, 0x0, 0xd9, 0x29, 0x0, @broadcast, @remote, {[@noop]}}}}})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000024000b0d00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200140001000600000000000000f3ffffff02000000040102"], 0x148}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6fc7217ef12b6e82}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x210, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0xffffffffffffffa0, 0x4, 0x77}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xd252}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
getsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000500), &(0x7f0000000540)=0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000080)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:20 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_mount_image$vfat(&(0x7f0000000640)='vfat\x00', &(0x7f0000000680)='./file0\x00', 0x618, 0x3, &(0x7f00000027c0)=[{&(0x7f00000006c0)="c513f678bd19e2d693ddb02d2ac34a5a8fae5ac8e4cf22b5f69502a2dab8165c15f2d332f42cfc0f877508d4ab66e774dcad250bc7a21c4121d2a99e21c893f250a9cfe850ba31cdb447ec8b6e4e6c1fe3e1ef99a3f8ece157df9858c3a38fe5cdee0b6bfe111fd4c8f79aa0d807ba778a204a947121415ea01f74f28aa1002d387ae239211cb31c82bf830c5cda9eb063b2dd525badea19fd472c071b2e441e31a9bdfec25a7c90e22b38d9d0537eeeea60194ec97735c48c83688e53585f6e693774021aa3c11e08fec5287dc31ecf3d2bfbe2089cc37d11e15fc7", 0xdc, 0x527d}, {&(0x7f00000007c0)="e9936c52cb91f949042e22144e3d4798395eb837a33296070e9712c3b2d71d1f05d16e702a0cb9783fc41a44d8de6afdc749a8ebd9a1e8e50d3113ffd570c16f21d551892e882a9dfc6ba7cb35a8009fa92e161b17c3955e6b127ae9c1ec4ded8af4f49fefe4f7fa837a3fb0214566f267c37105af280b5aa33887201b243bea1e9315844d046096af194836c28d4ff0b120312e1a01dbcb61f10e19a139cfd36a81794c86e8ef9356afe11e0cabe6a5ef810d12a9c0d2873d865697c51fc91fbc6de01977aeb0fbad525ad6dfa6b5693f344d0d466a678082380140337ad77b56a13c4bf3e23f38752ed7dc97cdf7327836dc6f9cb67d80666f1c9755cc82b9933ab304b0e54c11a425baa413853dde7ecb58fc8da60545e6117527b77d40cf34b08d56d2e00a5a767cae8eac2b6ad3ff52386912c3e0e3127a66aefded9f0e007baf64f97dade0080a81329cfe7ed8db58c637a399ba4abd2f4cc1db4360b3cc4a9691f24f1e12596077d5d510529d667d559543edf9d4c09770b86d3a283c8544739f2f737265ea52934f04ea46f0e1b495b75e051abdaba1ec7b2aef895f77262906da80e94fa80f1719e0445510f53c2b176e4e7ce2e3007ec96fc7dcb35a366d9880f82df26b1f75f03abe0cab779b0638dc1a3e95c99c5dc5d4f1c58a3137ceeee64d24df0ba38395b254bc351c76162ed695e36c70ef1110fdb38113b538b9e8cb77552ee4194d6ff202b79bb7da66bb20de296a434de3b9676e01cdc1a90431cce125f330472bc3f02fb3045bb8181ba92b4079c3aef1b1a850ed89dbfe1761e7d5e2b0203d7548b69ab01c1fe2da76c03c24271ef246ee18f1d3676b48aa91c99ce3bf78e0449bff23db9a1284823ac388562da96b2329adf22f586ed5ee80a2fd663898dadb4896d737f0852e2f4c4018588097fd5168bfc65a67c6323dc44089a31728526d22232b8e338e8e4240c96fdf546123f8d9062e32e004e9dc1afc6649005c23b09f0fd5b94476cb3c1dc18c53d12bf23f911476a82a3f8d20533d3db0edaf11d2205324e176aa6365e8efc11986d019bc24cf812827b795c29c17c528391b510d1dbbe3597095c24a63a99eff92b43ab0128fbc22730997f3de6ad0dad6bc9d23c25f1cd741020fb74a9c3461a82b32885e3ec8aa0aa598030cfee963b5a79b8a887e9f8366bfb76db3186556491f3dd5cb1539534357d3e68a5b0c4dc94cd9965a7355d05133c4443838cee2cad1ed07fb193ff20f4a9fdb551bcee2cdaa58fad05517c62eaaa73e004482e078b2fe88d83636e6386b359229caedf8618b1930ee663d9e36bf8c69e05efbd360477514486584de5a7e251f3590e88239b4d8f9cde959cb985e597e1f08f53a0997cddb1dda38123f88ea6a6c9034f23d23be41437c5a6789ded4457e5957fa5c8f9b8dfc0fdd83599dd3693f69d911c195e8339d6924911d63e2ad31eb93a70c3a991b7de59897b3a7025bcb5cd7906bb22a2bebd09b689a0f10d0d0f8a866a3721a63f8b425a60978d0fd9d97c1136c4caec73ab3fbfec680bcc7d9a1e256d3a5b9ac883b00b3389e79a0382b6d933a626cadc7ceccd50a1ebe8f0669847691162f92fec8752291fb37f611195dc21312fcb1f82bcc434ec763bb84805b47a67b9b09a22043a1a22dc10826d6263201b628473f73e752051a46ab5265ef141754d10748e03aa50a7e6a1e337d41bb4b418b10146c401ef0df015fe3bde7162ca5d802a6c018b13a6d4cd9201d6f2dd2e4721671f51128976db836ab84e9b5893b7526010ad6c22dbb1b998607fc6f22aefcbdb1279d1012e7e01433af492d72e58dc139cb9b0595063ffda9973494042fea392a529edc0d7fe41f1c57afa8bc5df1bb3f6179c6a7272f640d0da89615b5443bb61c959c516cddb9ed5fb047e48609d396bbdb22b55c4358df9fc91c7224b2d7686b957048fae8dd49d72b004775137f3c84f040dfa2129cf9d7445b332e3af2f21a9fb625a0b28193467a05ee459a5aefc1d5d6e9e6cb6fba6ee311ef4106238842a3a960599a75208b2c6f523f8bf35c79c62aaad901d1075eb3b861f0eb2b7b9eb08cd8cfc3a35601600c8c39498729535f506890ba567ab1a0b4c0849fa857be86475be1ac4d1da3fee8e0d16d4b4ca7db4a93ccffe101997d4b40a26c638d3fa80d81ba25fcf782db5db698c345223505f88f370715a51c3182e24bde5aaa92973363ef855f069ed23e2bd10a08136364dd65f7e950b05149edcc7a9f35379ac802a57c6caebd65080425b043414a939fee3925d61d22c67072dccdb9a63dbb4df886980974437346d5560b4030bc000348184b56b439206896b271a0fe50d8ec8a4fef72e294a23de8ce4e9233a617c0a92ff59e4f195459e7519d0dd50eebbf9c56a5ada5119cc4b7b6a8ed8e5f88f5dc47d9fad3a18e1e67d2bfec53c2284ed1496868083a8cd544cf9183e9f4f1c142870fc5d4bcb4c3731e88ea41b2f697ad18cb4c3fd7d6f946305c8d42c89a5f28741cead32344d5009e0918acbe33fae164da785247f0ad949f11aab543c8e4b38becd95879383d269e42a8d7b16354f6d79097ebd38c335e28ba4d841ac343d1a1afc9a67c75cca5239de77cfd258bfc4a1e2e95d59a06d32841a1a13f0e5cf6bec115f2b6b9d42bb3216ef468e8a4b2d61a390acc6bf3e258698ef272d8c0e3ffc596b20c78074a0441456b835add10c7fc6b730be9c924f4a42ddf60c99f93b27f537ff03d38529e1389484f3cb312160dae8baec99b3e6d5a71a491e90d75f89afd8d44dab936dc697f55faf4f93ed730b644aacc8e66dce53e29d7b2682e735b0562df7fe708730a83750394a8e6e33990581a37bab2b9b9e3d90388cc8094e33b07adbbe8e888367f15846c44bf820e920a5e50b3273f29fd7426855ea4ba66ab7fb0fba80f858a3d2553f454bd824f8f305ad945ca5fe7cad22b11b3bc8691e7119d7341f3e2c862a543a10a9fb24efce7497b5ead7690e93424d96f1fc94a00302e53e6467595a52fe0e81bdeb1e4bd0c7591168ac37766902a6ee034e9de30de26feeed62e36c43985090c23d384259c51deb7321c0f4958cee7384208b14d1bc455d6959f93d9647a29cc440f1e2d11e4f8415e02e154d3dcef2bed37ec2ad1521e3c780b2601ae5fdee2930d010f41008ab00f421c993b56fd3d11892de4f065126341d77ce48f02c43db81de63e99051c68b656053d2a8dc43dd7db8189a9ad741e0c4fc68ff2c5c224232642884ca371729f9075c4de9e7a488b997ce133997db785e62c7cbf9d7456a70d236ee60b864078a0097331161436dccc48234ce41e4d635349297dc9c2becb88d3d0bee896ba714f6f0a2b3fa2c97fbb9c21202b1e7bfcb78f3da7671ebad4f9429c4720dce885581f4ae9f8c59ba7cb8a3d3744b2b8b5cd6c4e18f47e65b8c580c9036b595c17907bbbdffcc9daadd39c2ba2121e83dad0038b477e59e48361374723b6ca28ffd741351973d6208a052411e4cab824f57f71d6bdbc81a1010870f7f63d460194e19a19738620c1e159a4b41bb907d5b55187871c96330e040ef4a1f0d92e3657e5045c4558a158ef3771652ed73d6f06cae04e8c6640d653e48a0d377348b38b66c06b20dbd2381dbd24cfcc275da84e080fcbbed397b91fbc50c08b0028e3946b2555547206a2ca0212864e65f38eb382247f77c5befa19155da03e839ed0061d37232d05954353afc4da7d79d07e42a7cf858f9784624c8d4ea78070df46ba25b404632cc6c3753aa4c14d43c9eb6d1096459ddd4c821ef75bba97108a7c179d983f7929a73beb4aac926677ad4d3edff220fe8107688cfcd084741d70cbfa6bb938af20ed79aece616775779c119e947c7015018fb5d16fc3318675e143e76ce601002c9db58bdf384f1df52c1c2fcba6d49f7d924494667e4005fa7039f1c49ae05504cf7617b65c106545b0c4d5ebbf69d66e25e6670e65824a27199b71e81fb42a7b922e0d400f5b5f56b0c0bfb2686ecafebe66451fcc65cf57d86cea6aa24b21bb10a9424da041259e6369bb104fb55818b0bfc0b041ac8b6bcdaae5b9bf4e0c3b0396d69a9f074eb2a2aa1fcdac29e8ef2ab9699538107eefeb700fb86cae230ae00ffcc86f8140fd28652de6a274a1d8836dd198a98bcdd383418b7783c85cb113294f661aa79fb65eeecf61c615083ce873c3bf1a6b7bfc321e9daee91d60a04b8624291ef0b093986d8289a860a0cedbc172f06aa988515f2269bddf6668da9d37805bacfa75392e961153bbfff67e91557a0ba93bbb775143acab8686d16857401731912053247e4b0af550e25fafe952d74efd80c6306daf9c1620d8ddad8fb0eb8c20494d034b0e1be3bedc70ac1d93367e370699a55845a25accdcf4ebc09fbfe9d3e81fd62d8dbd72f2bfe254c915b737ee901a54d4ba4fc06d940ef9709ff632166f83c8dad474c5084cb54d12577b60a8d77b96662e11e038cc05bb2747778d640538db973a781f832a81bbc300cc4d89fb8169e1bcd0533cf6e6a87b4e70e41ef7f0c16237c4aff6fa8e1bac2d3fad07582b3d86650b0685f41b9e7f3b22879998e44c7b74c66d3479b5e403971472d19e6190d95393378d0c8d669250fc17b1b8ec513ccd3200037c43b55dbb2edc16440b00b64533a99335289db97d9f279e0fb368c590229fcc8507d8d0e43de8b5053ec4ef78b6c32dff024c28972038b673f763420b44188735d96c63601fafbda7bf2e47337b02e4bf090e62a8736ece55fbc5c18810492e6b59872f55063e2ad9e290101f52585347c4b1cae0cc144754d6cb18aaa50e2a440333dfd8ae5cb560979c644cbc937932c8477c1f978abc072d2c5725e07a4e03cbc3216d6743f3345c104882a51b6aa4e69264064d6c8eae99e4d29dcd2008940f96673cfeb191a962be6b48f183fe033691b182c7deb5550bcde8a632b8306ee44557e8d05a981787d0bc8a2d321b588395f4ff5f83f3129c8af5073a35ab2fe410d464e9a5a27f8b7093c844b6c85f2e57dead214883b5fa69ee86a7fabe9b7111107d3cba92190ce587623e0cbd2c26525ff40e5bd96699d73272025e24cdcede0e9b878be23ec45685acc9237ef01076a4e4bccca933e1edc558873701db3d9b64dcb41caa89cd4c086e3397d000d3b1c74787975f7efd60db1a14a23ab2f7ad04a22fc9940e85447bb4c0c6e607f192e3cb65cfa50364e3ab802f7b70eadfe5dbb29ecf9055ad8671fa7fac5643ee8c63e1573a2c120a8a9d06f497db4cf8b0a71c3d3cfda9026e9f215e3bb5168e7f365e6e152114723c93e00df9d0b45148e82ce270b531ec71fbfa866a8535290b8dce76355fd0f21f0b35a9b05d9d134695c04ce87f757b7e47c65a762c91d8605e4448089c9341eea857783bb1567bda841d5b29a1aef381cef98d2deeda39f04c3305d6527765875a4dd07385721129e97366dffa3af6732ac5a9906bb233612e0ab33943cf900124b7accda0c2a66e32d2c0d210b4349733f9021a6c2a78f7180304522c5df292dc2a0dff1cd7d9a395042f3d9d9d43edd991de42a23dff1f4525dbe53d8b72c850bfcd48fbc07454f3037b23766532ab172782143a79f8418e4f216c258b1a6f0e8244ae18afca1de2691f82140ea31ba9f05e47df9ffec39074308591d3741b184530887fb9496e58e5ba2476b9b1d7884f74872c99fbcd6880b69f77e35d4497dc74d56d51f84b79f4126a69bce03aa1b0501354442f774ce32dda", 0x1000, 0x4}, {&(0x7f00000017c0)="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", 0x1000, 0x3}], 0x4804c, &(0x7f0000002840)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed='shortname=mixed'}, {@uni_xlateno='uni_xlate=0'}], [{@subj_user={'subj_user', 0x3d, '/dev/ion\x00'}}, {@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, '/dev/dri/card#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@uid_lt={'uid<', 0xee00}}]})
vmsplice(r2, &(0x7f0000002a40)=[{&(0x7f0000002900)="8c5387d38dc2fe035cbf1b09ec354a2400579c38fcc8fc56a534090b6dadd0fba5bf95e5e8185a143d56b90405f83633a96fa00f3afdd21bf0471bdb32ff399e8607ec997e59f35ddf110e49", 0x4c}, {&(0x7f0000002980)="5a96e58fb2c343ab05fb577a7451ec0db04b8e045a1c78eb66e5f7d8d9b1647039f1a22c512ff496d4f5148e695a46745abf95860536bd06", 0x38}, {&(0x7f00000029c0)="f9d90012325a882f00d4138b0077ceccdfd3a813f3760686695ea8fbe69fcd9f8d0c15c0a0809d16b2ccde1dd92695d93153a9677f9df4a3c72537", 0x3b}, {&(0x7f0000002a00)="fd631a37fe52fdcc5741e8f6c3eac07578c36c26", 0x14}], 0x4, 0x5)
r3 = dup(r1)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)

02:51:20 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
dup3(r2, r3, 0x0)
poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0)

02:51:20 executing program 5:
ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x50b580, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x10000, 0x2cd, 0x8, 0x7ff, 0x654, 0x8, 0x7f, 0x0, 0x100000001, 0x81, 0x7, 0xffffffff, 0x8, 0xffffffffffffff7f, 0x5]}, &(0x7f0000000180)=0x100)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000200)='./file0\x00', 0x162)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000380)={0x2, 0x3ff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240))
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r7 = dup3(r2, r4, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000600)={"36dd83009b20b3bd5c1d0b5492988d1920e1d8d1b5611a6cd3698e7259ab2b103283de86d2fa69791f8d87be42a8418993424ce19937ea196b54787d574bad9257446515d981de40c4d52b18c1f835c64100ca342ff6b73d9a856514d6554f77c2a4bdb5f9da6408ecebfce60afd0b1cb6921af89c072a45a2a4870a6214dc25393c4de2605078d3d024306bc2af122b316a289e2497a1fa53a7a82f80ec3ea8998143646fca419fc0c2e63e7d290922849e02a7e2a462ec9948bb65a593cdc38f5d285046a9745a57d422d6867fba2fad6eddea81bfa0072353d07bd07f00536d122980cf2ec1c0add1781b00f53821996554a9e82a96f1b417668b1e1baaae71446444562b880da9ab8164d6fde8067cb1fa5235b08a83d1e2012547d16fa538b24d8df798069d1cde9c5eb9e50f4907974baa490ea1dae2effd35d66c39854e6c346b07d4f79bdccc22fdba9a59bf86c0c70fd9ce8fc2b975e5a332b23985c1b30935d0cd46a42929184c7657f21f9e710808a66e484a22d154e71a49fe83670078d53b34bd1421230a7e5a2477cc8b9c233fd5336cf6bbd9f44607f0574dfbe25c8dfda7b34018b1c0fc0be12262e4af2c351b53d9d0dfdef111b9e4ba122399ab9a36ecf5aff8f783a5e6912acde6253fa76cc660d7323663a305bb53edaa385eb8389a003c1813b219ef99b497645095098ec8b1ba16c4c86cbee97cb23f3a4debcf15a3ff77f1e68224999b29f52de5bfe5299a8b75fb95d577c85c118bc8ae4f468d41681153bd968ffee9c87bc0fad12b98e16aedcc75be4b09067c2f58f8a65a3b9387b54b423c6d1d195894fe86099520b3b3635fa8546b4e6a909c0ac0632f8c8cece0c5c9783bbfcb59679984bf96ea391a0db89c71f8a16824a37cf8db0210e767d7aa90978f5bd391c6b3e1120c264d296999a062ca08b6cf11f1b1fdc0b47330cbe6f2b63e3db6984dc6178c84b4e54ec57dc696525a58e407a26425107f5bc6bcdbc5fb0fc40170a53e9248a2613297537f02e5b9c2b6640a3408a0f8e49931fb62a2255218e68457d2d68250d99553e3c04333062e414d18a8b504d3d067717cfc024696c80c005042e22f9032013d4732568c16f25d2b871d7e2c685983f16098d21c5431f8098068b3300ee69565bbe1cf8d16905257dba440caffec588e3b66e876b3842b9fe18301e0d1f02d479f1cd7605718cb8a9cf843dc341e2d5c5fe4c37f525354e641975cf613b9105dcfe1ea1049ab65030bb4277b579c8855f9a916565608eb6fbcef2641eaa4eaca56d5df6703c9e021fdfa1ee9e704c12af58b965afd24c73d90d8008acb50762da6b18a246878c2774b57fbe759cb590e78deca3ced4479f75610aa0b9358c97e9710c3df450d4868711d13cd7d5f7553bb5efe5c09318e41002e73ddd364db550bf0a8a915a966e2"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(r8, &(0x7f00000001c0)={[0x4]}, 0x8, 0xc0800)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000100)={0x9, 0x3, 0x4, 0x1, 0x9, {0x0, 0xea60}, {0x5, 0x1, 0x4, 0x0, 0x5, 0x40, "ae1334bc"}, 0xd4f9, 0x3, @planes=&(0x7f00000000c0)={0xfffffffe, 0x7, @fd=r7, 0x9}, 0x7f, 0x0, r2})
socketpair(0x27, 0x1, 0x4, &(0x7f0000000480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000806000000000000000000000a0000090900020073797a32000000000900020073797a32000000000900020073797a31000000000900020073797a30000000000900020073797a300000000006000100070000000900020073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000)

02:51:20 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x1, 0xd})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
dup3(r3, r4, 0x0)

02:51:20 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x10000, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000180)={0xffff7fff, 0x6644, 0x5, 0xa, 0x81})
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
dup(r7)
poll(&(0x7f0000000100)=[{r7, 0x6128}], 0x1, 0x0)
dup3(r2, r4, 0x0)

02:51:20 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='3^!\x00', 0xfffffffffffffffe)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-control\x00', 0x260080, 0x0)
accept4$llc(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000480)=0x10, 0x80800)
r2 = add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r2}, &(0x7f0000000340)=""/243, 0xf3, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000004c0)={r1, 0x0, r2}, &(0x7f0000000280)=""/101, 0x65, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-generic\x00'}, &(0x7f0000000340)="abf628ffa45a7812009c0a2ce4499da571fd849dc885717c15be8ebf8b188e0c54f83e9abc94a541d53111218b10335e6ad4", 0x32})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xc, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000500)={0x5, 0x3, "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"})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
geteuid()
poll(&(0x7f0000000100)=[{r3, 0x6005}], 0x1, 0x0)
write$P9_RUNLINKAT(r4, &(0x7f0000000640)={0x7, 0x4d, 0x1}, 0x7)
dup3(r4, r5, 0x0)

02:51:20 executing program 5:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x140, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0))
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)

[  284.146123] print_req_error: I/O error, dev loop0, sector 0
02:51:21 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1})
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffff, 0x101040)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80800)
r7 = dup(r0)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000280)=0x8)
dup3(r7, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x400000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r2, r3, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20001, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
r8 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0xfac6, 0x101000)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r9}, 0x50)
write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18, 0x0, r9, {0x3ff}}, 0x18)

02:51:21 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x488040, 0x0)
readv(r5, &(0x7f0000001940)=[{&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/12, 0xc}, {&(0x7f0000001880)=""/188, 0xbc}], 0x6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
getsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f00000019c0)=""/220, &(0x7f0000000080)=0xdc)

02:51:21 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x10000, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000180)={0xffff7fff, 0x6644, 0x5, 0xa, 0x81})
ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r7=>0xffffffffffffffff})
dup(r7)
poll(&(0x7f0000000100)=[{r7, 0x6128}], 0x1, 0x0)
dup3(r2, r4, 0x0)

02:51:21 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={<r6=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000200)={r6})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
r7 = dup3(r4, r5, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
r8 = dup(r1)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000240)={<r10=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc10c5541, &(0x7f0000000200)={r10})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0)
accept4$unix(r7, &(0x7f0000000180), &(0x7f00000000c0)=0x6e, 0x800)

02:51:21 executing program 4:
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x3, 0x23, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r5=>0xffffffffffffffff})
r6 = dup(r5)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000240)={<r8=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r8})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:21 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r6=>0x0}, {0x0, @struct}})
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x420440, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000010c0)={0xa, 0x4, {0x4, @struct={0xc, 0xc0b2}, r6, 0x8, 0x8, 0x8, 0x4, 0x2, 0x440, @usage=0x8020000000000000, 0x9, 0x8, [0x8, 0xfb2, 0x3ff, 0x1, 0x6]}, {0x6, @usage=0x81, 0x0, 0x1, 0x9, 0x8000, 0xfff, 0x10000, 0x29, @usage=0x3f, 0x80000000, 0x0, [0x500000000000000, 0x5, 0x3, 0x0, 0x2, 0x5]}, {0x5, @usage=0x3ff, 0x0, 0x3, 0x10000, 0x9, 0x9, 0x8, 0x0, @struct={0x7d5d42f1, 0x10000}, 0x3, 0x4, [0x8000, 0x1000, 0x7, 0x5, 0xcce, 0x1]}, {0x4, 0x2, 0xd20}})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 3:
r0 = gettid()
ptrace$getsig(0x4202, r0, 0x1, &(0x7f0000000180))
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r2, 0x6005}], 0x1, 0x0)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x3})
dup3(r3, r4, 0x0)

02:51:21 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000082}, 0x804)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x36}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x41}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2830}, 0x90)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:21 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xa8140, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000080)={0x0, 0x3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

02:51:21 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={<r7=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r7})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r5, r6, 0x0)
ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000000c0)={0x4, 0x9})
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r2})
r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r9, 0x80000, <r11=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r11, 0x6430)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)

02:51:21 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r4})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r6=>0xffffffffffffffff})
r7 = dup(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={<r9=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f0000000200)={r9})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2)
dup3(r7, r8, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4004040)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

[  285.701105] ------------[ cut here ]------------
[  285.705895] kernel BUG at drivers/dma-buf/dma-buf.c:68!
[  285.711995] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  285.717469] Modules linked in:
[  285.720893] CPU: 1 PID: 17826 Comm: syz-executor.4 Not tainted 4.14.194-syzkaller #0
[  285.728760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  285.738105] task: ffff88804cf0c5c0 task.stack: ffff888055ee0000
[  285.744146] RIP: 0010:dma_buf_release+0x313/0x5c0
[  285.748964] RSP: 0018:ffff888055ee7b38 EFLAGS: 00010216
[  285.754484] RAX: 0000000000040000 RBX: ffff8880a138ea80 RCX: ffffc90006e7a000
[  285.761748] RDX: 000000000000061f RSI: ffffffff83afe533 RDI: ffff88809b60cef8
[  285.769010] RBP: ffff88809b60cd80 R08: 0000000000000000 R09: 0000000000000000
[  285.776270] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a138eaa8
[  285.783520] R13: ffff8880a138eafc R14: ffffffff83afe220 R15: ffff8880a138ea90
[  285.790811] FS:  00007fe43ba6a700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
02:51:22 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f00000000c0))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={<r5=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r5})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
poll(&(0x7f0000000100)=[{r1, 0x6005}], 0x1, 0x0)
dup3(r2, r3, 0x0)

[  285.799019] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.804895] CR2: 0000001b32d21000 CR3: 00000000a521c000 CR4: 00000000001406e0
[  285.812156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  285.819423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  285.826684] Call Trace:
[  285.829272]  ? ima_file_free+0x4f/0x330
[  285.833251]  ? dma_buf_detach+0x240/0x240
[  285.837411]  __fput+0x25f/0x7a0
[  285.840690]  task_work_run+0x11f/0x190
[  285.844584]  get_signal+0x18a3/0x1ca0
[  285.848391]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  285.853508]  ? reservation_object_wait_timeout_rcu+0x93d/0xad0
[  285.859468]  do_signal+0x7c/0x1550
[  285.863029]  ? dma_buf_begin_cpu_access+0xd6/0x120
[  285.867943]  ? dma_buf_ioctl+0x100/0x160
[  285.872003]  ? setup_sigcontext+0x820/0x820
[  285.876330]  ? lock_downgrade+0x740/0x740
[  285.880513]  ? dma_buf_begin_cpu_access+0x120/0x120
[  285.886116]  ? do_vfs_ioctl+0xe2/0xff0
[  285.890119]  ? selinux_inode_setxattr+0x730/0x730
[  285.895065]  ? ioctl_preallocate+0x1a0/0x1a0
[  285.899457]  ? lock_downgrade+0x740/0x740
[  285.905363]  ? check_preemption_disabled+0x35/0x240
[  285.910466]  ? kick_process+0xe4/0x170
[  285.914336]  ? task_work_add+0x87/0xe0
[  285.918231]  ? exit_to_usermode_loop+0x41/0x200
[  285.922891]  exit_to_usermode_loop+0x160/0x200
[  285.927595]  ? SyS_ioctl+0x5c/0xb0
[  285.931136]  do_syscall_64+0x4a3/0x640
[  285.935041]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  285.940256] RIP: 0033:0x45d579
[  285.943605] RSP: 002b:00007fe43ba69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.951312] RAX: fffffffffffffe00 RBX: 000000000000b000 RCX: 000000000045d579
[  285.958614] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000005
[  285.965998] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
[  285.973420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
[  285.980854] R13: 00007ffdfc9dff5f R14: 00007fe43ba6a9c0 R15: 000000000118cf4c
[  285.988116] Code: 31 e4 e8 01 6b a3 fd 48 89 ef e8 49 52 d5 fd e8 f4 b1 ab fd 44 89 e0 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 dd b1 ab fd <0f> 0b e8 d6 b1 ab fd e8 b1 5d 9c fd 48 8d bd 38 02 00 00 48 b8 
[  286.007364] RIP: dma_buf_release+0x313/0x5c0 RSP: ffff888055ee7b38
[  286.015076] ---[ end trace ce54978f207b4428 ]---
[  286.020179] Kernel panic - not syncing: Fatal exception
[  286.027324] Kernel Offset: disabled
[  286.030951] Rebooting in 86400 seconds..